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^— V ' Abstract 

^^ , A (l + e) -spanner for a doubling metric {X, 6) is a subgraph H of the complete graph corresponding 

^^' to {X, 6), which preserves all pairwise distances to within a factor of 1 + e. A natural requirement from 

a spanner is to be robust against node failures, so that even when some of the nodes in the network 

fail, the remaining part would still provide a (1 + e)-spanner. The spanner H is called a k-fault-tolerant 

(l + e) -spanner, for any < /c < n — 2, if for any subset F C X with \F\ < k, the graph H\F (obtained 

by removing the vertices of F, as well as their incident edges, from H) is a (1 + e)-spanner for X \F. 

In this paper we devise an optimal construction of fault-tolerant spanners for doubling metrics. 

^.^ Specifically, for any n-point doubling metric, any e > 0, and any integer < fc < n — 2, our construction 

^H . provides a fc-fault-tolerant (l+e)-spanner with optimal degree 0{k) within optimal time 0{n log n+fcn). 

C/3 ' We then strengthen this result to provide near-optimal (up to a factor of log k) guarantees on the 

, ^, , diameter and weight of our spanners, namely, diameter O(logn) and weight 0{k^ -f fclogn) ■ uj{AIST), 

while preserving the optimal guarantees on the degree 0{k) and the running time 0{nlogn -\- kn). 
04 , Our result settles several fundamental open questions in this area, culminating a long line of research 

^ ' that started with the STOC'95 paper of Arya et al. and the STOC'98 paper of Levcopoulos et al. 

On the way to this result we develop a new technique for constructing spanners in doubling metrics. 
In particular, our spanner construction is based on a novel hierarchical cover of the metric, whereas 
QQ , most previous constructions of spanners for doubling and Euclidean metrics (such as the net-tree 

spanner) are based on hierarchical partitions of the metric. We demonstrate the power of hierarchical 
f— ^ , covers in the context of geometric spanners by improving the state-of-the-art results in this area. 
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1 Introduction 

1.1 Euclidean Spanners. Consider a set P of n points in W^ and a number e > 0, and let H = {P, E) 
be a graph in which the weight u}{x,y) of each edge (x, y) £ E is equal to the Euclidean distance ||x — y|| 
between x and y. The graph H is called a (1 + e)-spanner (or simply spanner if the stretch 1 + e is clear 
from the context) for P if for every p,q (^ P, there is a path in // between p and g whose weight (the sum 
of all edge weights in it) is at most (1 + e) • \\p — q\\. Such a path is called a (1 + e)-spanner path. The 
problem of constructing Euclidean spanners has been studied intensively [181 IIHl HZl SH ESI HI 13 [3l ^^i 
see also the treatise on Euclidean spanners and their applications by Narasimhan and Smid [39]. 

Euclidean spanners find applications in geometric approximation algorithms, network topology design, 
distributed systems, and other areas. In many applications it is required to construct a (1 + e)-spanner 
H = {P,E) that satisfies some useful properties. First, the spanner should contain 0(n) (or nearly 0{n)) 
edges. Second, the (maximum) degree deg{H) of ff should be small. Third, its weighTLju}{H) = X]ee-E''^(^) 
should not be much greater than the weight uj{MST{P)) of the minimum spanning tree MST{P) of P. 

A natural requirement from a spanner is to be robust against node failures, so that even when some 
of the nodes in the network fail, the remaining part would still provide a (1 + e)-spanner. The spanner H 
is called a k-fault-tolerant (1 + e)-spanner, for any < fc < n — 2, if for any subset F C. X with \F\ < k, 
the graph H \ F (obtained by removing the vertices of F, as well as their incident edges, from H) is a 
(1 + e)-spanner for X \ F; we will henceforth write FT as a shortcut for fault-tolerant. Note that the 
basic (non-FT) setting when all nodes are functioning corresponds to the case A; = 0. 

The notion of FT spanners was introduced in the pioneering work of Levcopoulos et al. |37j from 
STOC'98. A basic (non-FT) construction of (1 -|- e)-spanners with constant degree (and thus 0{n) edges) 
and constant lightness can be built in time 0(n log n) [71[23l[31]. Levcopoulos et al. [37] observed that 
the (A;-|- l)-poweiG of a spanner is a k-FT spanner with the same stretch. Therefore, by taking the (A;-|- 1)- 
power of the basic construction of [31], one can obtain in 0{nlogn)-irn2'^^^' time, a A;-FT (l-l-e)-spanner 
with degree and lightness both bounded by 2 '". Notice that any k-FT spanner (with an arbitrarily 
large stretch) must have degree i^{k), and thus Cl{kn) edges; also, it is easy to see that the lightness 
must be Q{k'^) [21]. Thus there is a gap between the exponential upper bound 2^ > and the polynomial 
lower bounds il(/c) and Q^k"^) on the degree and lightness, respectively. In addition, Levcopoulos et 
al. |37j devised two other constructions of A;-FT spanners, one with 0{k'^n) edges and running time 
0(rz log n -|- fe^n), and another with edges and running time both bounded by 0(A;nlogn). In WADS'99 
Lukovszki [38] devised two constructions of A:-FT spanners, one with the optimal number of edges 0{kn) 
and with running time 0(nlog '^ n + fcnloglogn), and another with degree 0{k^). 

In SoCG'03, Czumaj and Zhao [21] showed that the optimal guarantees 0{k) and 0{k'^) on the 
degree and lightness of A:-FT spanners can be achieved using a greedy algorithmo However, it is unclear 
whether the greedy algorithm of [21j can be implemented efficiently; a naive implementation requires time 
O(n^) • Paths{n, k + 1, t), where Paths{n, k + l,t) is the time needed to check whether an n-vertex graph 
(with 0{kn) edges) contains k + 1 vertex-disjoint t-spanner paths between an arbitrary pair of vertices. 
In addition, Czumaj and Zhao [21] devised a construction of A;-FT spanners with the optimal degree 0{k) 
and with lightness 0(A:^ log n), within time 0(A:n log n + nk'^\ogk). (See Table [1] for a reference. We also 
refer to Chapter 18 in the treatise [39^ for an excellent survey on Euclidean FT spanners.) 

We remark that the time needed to compute a k-FT spanner is Vt{n\ogn + kn). The first term 
n{n\ogn) is a lower bound on the time needed to compute a basic (non-FT) spanner in the algebraic 
computation tree model \\1\, and the second term Vt{kn) is a lower bound on the number of edges in any 
k-FT spanner. Up to this date no construction of A;-FT spanners could combine the optimal running 
time 0{n\ogn-\-kn) with either the optimal number of edges 0{kn) (and thus the optimal degree 0{k)) 



^For convenience, we will henceforth refer to the normalized notion of weight '^(H) — ^i^istip)) ' which we call lightness. 

^An s-power of a graph G is a graph with the same vertex set as G, and there is an edge between any pair of vertices 
that are connected by a path in G with at most s edges. 

^The (2) edges of the underlying complete Eucldiean graph are traversed by increasing order of weight; each edge {x,y) 
is added to the current graph if and only if it does not contain fc + 1 vertex-disjoint t-spanner paths between x and y. 



or with the optimal Hghtness 0{k'^). In particular, the following questions are stated in the treatise of 
Narasimhan and Smid [39j; all these questions remained open even for 2-dimensional point sets. 

Question 1 (Open Problem 26 in [39]) Is there an algorithm that constructs a k-FT (l + e) -spanner 
with 0{kn) edges in 0(n log n + kn) time? 

Question 2 (Open Problem 27 in [39] ) Is there an algorithm that constructs a k-FT {1 + e) -spanner 
with degree 0{k) in 0{n\ogn + kn) time? (This question subsumes Question 1.) 

Question 3 (Open Problem 28 in [39]) Is there an algorithm that constructs a k-FT {\ + e)-spanner 
with lightness 0{k'^) in 0(nlogn + kn) time? 

Another important measure of quality is the (hop-) diameter of spanners; we say that a spanner H 
has diameter A{H) if it provides a (1 + e)-spanner path with at most A(iJ) edges, for every p,q G P. 
Achieving a small diameter is desirable for some practical applications (e.g., in network routing protocols); 
see [6l[5l[2|[3l lll[[2^ . and the references therein. Euclidean Spanners that combine small diameter with 
some of the other parameters (among small number of edges, degree, lightness and running time) have 
been well studied in the last twenty years. In particular, in a seminal STOC'95 paper by Arya et al. [5], a 
single construction of spanners that combines all these parameters was presented, having constant degree, 
diameter O(logn), lightness 0(log n) and running time 0{nlogn). Moreover, Arya et al. conjectured 
that the lightness can be improved to O(logn), without increasing any of the other parameters; having 
lightness and diameter both bounded by O(logn) is optimal due to a lower bound of [23]. Arya et al.'s 
long-standing conjecture was resolved in the affirmative in STOC'13 by Elkin and this author [25j. 

Chan et al. [H] generalized the result of [25] for the FT setting. Specifically, they showed that there 
exist A;-FT spanners with degree 0(/c^), diameter O(logn) and lightness 0(A:^logn). The running time 
of the construction of [Hj was not analyzed; a naive implementation requires quadratic time. In the 
"Future Direction" Section of [TJ], Chan et al. asked whether the dependence on k in the degree and 
lightness bounds of their construction can be improved. A partial answer to this question was given by 
this author [H], who achieved degree 0(/c^), diameter O(logn) and lightness 0(A;^logn), within time 
0(nlog?i + k'^n). A merging of the two manuscripts [Hj and [44] gave rise to the ICALP'13 paper |15j . 
(See Table [1] for a reference.) We remark that the upper bounds of [T^ Bl} [T5] are pretty far from the 
known lower bounds: degree 0{k'^) versus Q.{k), lightness 0(A;^logn) versus 0(A;^), and running time 
0(n log n + fc^n) versus Vl{n\ogn + kn). In particular, the following question was left open. 

Question 4 J.?.^[ |.^^[ [7 ^ Is there an algorithm that constructs a k-FT spanner with degree o{k'^), diameter 
O(logn) and lightness 0{k'^) + o(/c^logn), within time 0(n log n) + o{k'^n)? 

Our Results. We show that for any set P of n points in M , any e > 0, and any integer < A; < n — 2, 
one can build a fc-FT (l-l-e)-spanner with optimal degree 0{k) within time 0{n\ogn + kn). The running 
time of our construction holds in the algebraic computation tree model, and is therefore optimal as well. 
In particular, this result settles in the affirmative Questions 1 and 2 above. 

Moreover, our spanners also achieve diameter O(logn) and lightness 0{k'^ + /clogn), which settles 
Question 4. (See Table [1] for a summary of previous and our constructions of Euclidean FT spanners.) 

Consider the lightness bound. Notice that it is equal to O^k"^), for all k = Q.{\ogn), thus matching 
the naive lower bound 0(/c'^) in this range. In other words, it provides a positive answer to Question 3 
for all k = Q.{\ogn). More generally, it exceeds the naive bound Q.{k'^) by a factor of -^^. 

However, the naive bound VL{k'^) on the lightness can be strengthened if we take into account the 
diameter O(logn) of our spanners. Indeed, any spanner with diameter O(logn) must have lightness 
r2(logn) [3l[2l|. More generally, for any parameter p > 2, any spanner with diameter 0(log„n) must 
have lightness Q{plog^n) [2l]. Note also that any spanner with degree 0{p) must have diameter Q(logpn). 
By combining all these lower bounds together (and substituting p with k), we get that one cannot do 
better than the following tradeoff: k-FT spanners with degree Q{k), diameter Q(log^n) and lightness 
r2(A;^ + k logj^. n). Notice that the parameters of our spanners are pretty close to this lower bound tradeoff, 
with only a slack of log k on the diameter and a slack of minjlog k, -^^} = O(loglogn) on the lightness. 
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0{k'n) 


O(fc^) 
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doubling 


[llllli[15] 


0{k'n) 


o{e) 


O(logn) 


O(fcMogn) 


0(nlogn + k'^n) 


doubling 


New 


0{kn) 


0{k) 
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0(fc^ + felogn) 


0{n logn + kn) 


doubling 



Table 1: A comparison between the previous state-of-the-art and our constructions of FT spanners for low-dimensional 
Euclidean and doubling metrics. See Theorem f.f for the dependencies of our construction on e and d. 



1.2 Doubling Metrics. The doubling dimension of a metric {X,5) is the smallest value d such that 
every ball B in the metric can be covered by at most 2 balls of half the radius of B. This notion 
generalizes the Euclidean dimension, since the doubling dimension of the Euclidean space W^ (equipped 
with any of the (.p norms) is Q{d). A metric is called doubling if its doubling dimension is constant. 
Doubling metrics were implicit in the works of Assoud ^ and Clarkson [2D] , and were explicitly defined 
by Gupta et al. [32]. Since then they have been studied intensively (see, e.g., [36 1 H6 l (331 [TH H2l [T1I91 [T5] ) . 

Spanners for doubling metrics were also subject of intensive research [26 | [T2 | [TT | (33 1 l40 l [29 l [30 l l42 | [T3 | 
25| [T^ HH [15]. In many of these works the objective is to devise spanners that achieve one parameter or 
more among small number of edges, degree, diameter, lightness, and running time. Spanners for doubling 
metrics were also found useful for approximation algorithms [9] and for machine learning [28]. 

The literature on FT spanners for doubling metrics is quite sparse, and consists of the following papers 
[13 1 114 1 H ^ llSj. Ill ICALPT2, Chan et al. [13] devised three constructions of k-FT spanners for doubling 
metrics. Their first construction achieves the optimal number of edges 0{kn), the second achieves 0{km) 
edges and diameter 0{a{m, n)), where a is the two-parameter inverse- Ackermann function, and the third 
construction achieves degree 0{k'^). The other papers are the follow-ups [HI HH [15] to [25] that were 
discussed in Section 1.1, which provide within 0{n\ogn + k'^n) time, a fc-FT spanner with degree 0(A;^), 
diameter O(logn) and lightness 0(A;^logn). The constructions of jl4 1 144 1 ^15] apply to doubling metrics. 

Obviously, Questions 1-4 from Section 1.1 are relevant for doubling metrics as well. Moreover, even 
much weaker variants of these questions can be asked. In particular, the previous state-of-the-art bounds 
on the degree and lightness of /c-FT spanners for doubling metrics are 0{k'^) and 0{k'^ log n), respectively; 
hence it is natural to ask if these bounds can be improved, regardless of the running time issue. 

We demonstrate that our construction extends to doubling metrics without incurring any overhead 
(beyond constants) in the degree, diameter, lightness, and running time. Notice that our construction 
improves all the previous state-of-the-art constructions of FT spanners for both Euclidean and doubling 
metrics, disregarding the construction of [21] which requires a somewhat unreasonable running time of 
0{ii?) ■ Paths{n, k + l,t). (See Tabled] for a summary of previous and our results.) 

In particular, our result settles Questions 1, 2 and 4 in the affirmative for doubling metrics. 

Question 3 is settled for all k = O,(\ogn), but remains open in the complementary range of k = 
o(log n)). We remark that the problem of constructing spanners for doubling metrics with sub- logarithmic 
lightness is a central open question in this area (see [9]), even for basic (non-FT) spanners, and regardless 
of the diameter or any other parameter of the construction. In other words, a positive solution to Question 
3 in the range o(logn) seems currently out of reach for doubling metrics, even for the basic case A; = 0. 

The main result of this paper is summarized in the following theorem. 

Theorem 1.1 Let {X,5) be an n-point doubling metric, with an arbitrary doubling dimension d. For 
any e > and any integer < k < n — 2, a k-FT (1 -|- e)-spanner with degree e~^ ' ■ k, diameter 0(log n) 
and lightness e~^^'^'{k'^ + klogn) can be built within e~'^^'^\nlogn + kn) time. 



1.3 Our and Previous Techniques. Most previous works on geometric FT spanners J37l [38l [2T| 
[39] apply to Euclidean metrics, and rely heavily on profound geometric properties of low-dimensional 
Euclidean metrics, such as the gap property |ll6l [7] and the leapfrog property |22] . In particular, these 
constructions do not extend to arbitrary doubling metrics. In contrast, in our work we only use standard 
packing arguments, and do not rely on any other geometric property of low-dimensional Euclidean metrics. 
Consequently, our construction applies to arbitrary doubling metrics. 

On the other hand, there are some similarities between our techniques and the techniques used in 
the previous works on FT spanners for doubling metrics |13 [I141 H^ llSj. The starting point in both our 
work and the works of |13[ HM HH [T5] is the standard net-tree spanner of [Ml [l2j, which is induced from 
a net-tree T = T(x) that corresponds to a hierarchical partition of the metric {X,5). Any tree node x 
is associated with a single point p{x) that belongs to the point set D{x) of its descendant leaves. For 
any pair of tree nodes at the same level that are close together (with respect to the distance scale at 
that level), a cross edge is added. The net-tree spanner is the union of the tree edges (i.e., the edges 
of T) and the cross edges. (See Section 2 for more details.) To obtain a A:-FT spanner, [HI [H] use 
k + 1 net-trees rather than one, and in each of these trees, each tree node x is associated with a single 
point from D{x). Another idea that is used in [Mj [15] is to use a single net-tree, but to associate each 
tree node x with 0(/c) points from D{x) (if any) rather than a single point. To achieve degree 0{k'^), 
|13[ [T^ used single-sink spanners similar to those in [5] , whereas [44 [ [T5] used a rerouting technique from 
the bounded degree spanner construction of [30] . However, achieving degree o{k'^) using these ideas is 
doomed to failure. First, in [13[ [T3] there are fe + 1 net-trees, each of which contributes Q{k) units to 
the degree load, thereby giving a total degree of Q(fc^). Incurring a degree of 0(A;^) from the approach of 
|44l [15] is also inevitable. The main problem is that a node x is associated with Q(k) points from D(x) 
(if any). Consequently, the same leaf point p may belong to Q{k) different sets D{x) of internal nodes x. 
For each cross edge that is incident on any of these Q{k) nodes, we must connect p with Q{k) edges, and 
so the degree of p becomes Q{k'^). 

The basic idea of associating nodes of net-trees and other hierarchical tree structures (such as split 
trees and dumbbell trees) with points from their descendant leaves has been widely used in the geometric 
spanner literature; see [lOl |5l [26l [El [HI [Ml [30l [13], and the references therein. In particular, any point 
in D{x) is close to the original net-point p{x) with respect to the distance scale of x, denoted rad{x). 

Instead of restricting ourselves to D{x), we suggest to look at a larger set B{x) of all points that 
belong to the ball of radius 0{rad{x)) centered at p{x). By associating nodes x with points from B{x), 
we get a hierarchical cover of the metric. Since the doubling dimension is constant, this cover will have 
a constant degree (every point will belong to a constant number of sets B{-) at each level). We use this 
constant degree hierarchical cover to obtain degree 0{k) as follows. A node x will appoint to itself Q{k) 
points from B{x) whose degree due to cross edges at lower levels is small enough; let S{x) be the set of 
these points, called surrogates. A cross edge {x,y) increases the degree of surrogates of S{x). However, 
every unit of increase to a surrogate p G S{x) is due to some surrogate q £ S{y) that is close to p-the 
distance between p and q will be 0(^ • rad{x)). This surrogate q, as well as other points that are within 
distance 0{rad{x)) from q, will not necessarily be in B{x). However, since the distance scales increase 
exponentially with the level of a tree node, all these points must belong to a close ancestor x' of x, where 
the level of x' is higher than that of x by at most 0(log -) units. The key idea here is to "compensate" 
one of the close ancestors x' of x at a value that matches the "cost" of x due to cross edges. By re- 
appointing the same surrogates of S{x) for 0(log -) levels continuously (at which stage we must reach a 
close ancestor x' of x that is compensated), and only then appointing new surrogates for S{x'), we will 
be able to achieve the optimal degree 0{k). While in the approach of |441 [T5] each point of X belongs 
to lists D{x) of Vt{k) nodes x, our approach can guarantee (though this does not follow immediately 
from the above discussion) that each point of X will serve as a surrogate of only 0(log -) nodes. Having 
assigned surrogates for each node, we replace each edge (x, y) of the basic spanner by a bipartite clique 
between the corresponding surrogate sets S{x) and S{y). Observe that S{x) and S{y) may contain Q{k) 
points each, and so the size of this bipartite clique may be as large as G(fe^). In other words, we may 



replace a single edge of the basic spanner by 0(A;^) edges. Since the basic spanner has Q{n) edges, one 
might get the wrong impression that our FT spanner contains Q{k'^n) edges, which is far too much (by 
a factor of /c)! There are two reasons why the number of edges in our FT spanner is in check. First, 
it turns out that many edges {x,y) of the basic spanner satisfy |S'(x)| + |5'(?/)| <C k, which implies that 
there are many sparse bipartite cliques. More specifically, we show that the overall number of edges in 
all these sparse bipartite cliques is 0{kn). Second, even though there are still many edges in the basic 
spanner which satisfy [^(x)! + |»S'(y)| = Q{k), we demonstrate that most of them are in fact redundant, 
and such redundant edges need not be replaced by bipartite cliques. (See Section 3.1 for more details.) 

The main challenge of this work was to achieve the optimal bound 0{k) on the degree. However, 
small degree (which also implies small number of edges) is just one out of four parameters that are of 
interest to us. Our construction is tailored in such a way that once degree 0{k) is achieved, the rest of 
the parameters come almost for free. 

Lightness. The standard net-tree analysis shows that the basic spanner construction has lightness 
0(log n). Replacing each edge of the basic spanner with a bipartite clique of size O(fc^) between the corre- 
sponding surrogate sets gives rise to lightness 0{k^ log n). Improving the lightness bound to 0{k'^+k log n) 
is more involved. The idea is to try replacing each edge (x, y) of the basic spanner with a bipartite match- 
ing instead of a bipartite clique; this is possible only when both S{x) and S{y) contain Q{k) surrogates, 
which is not always the case (see Section 4). The total lightness of the bipartite matchings is clearly 
0(A;logn). The more interesting part is to show that the total lightness of the bipartite cliques is 0{k'^). 
Diameter. We can achieve diameter O(logn) by shortcutting the net-tree using the 1-spanners of |45j . 
To control the lightness, we follow an idea from [1411441 [T5] and shortcut the light subtrees (those at small 
enough distance scales). If this is done carelessly, the degree and lightness will increase to at least 0{k'^) 
and 0{k'^ logn), respectively. However, by pruning a certain subset of nodes from the net-tree, and using 
bipartite matchings for the shortcut edges whenever possible, the desired bounds can be achieved. 
Running time. Given the standard net-tree spanner construction and the 1-spanners of [45], our con- 
struction can be implemented within 0{kn) time in a rather straightforward manner. Since the standard 
net-tree spanner can be built within time O(nlogn) [40^ 130] . and since the same amount of time suffices 
to build the 1-spanners of [^j, the overall running time of our construction is 0{n\ogn + kn). We remark 
that for low-dimensional Euclidean metrics, some variants of the net-tree (such as the fair split tree of 
[lOp can be built within time O(nlogn) in the algebraic computation tree model. Consequently, the basic 
spanner construction can also be built within time O(nlogn) in this model. The time bound O(nlogn) 
for the 1-spanners of [l5] also applies to this model. Therefore, for low-dimensional Euclidean metrics, 
the time bound of our construction applies to this model as well. For arbitrary doubling metrics, one 
should also need a rounding operation (to allow one to find the i for which 2* < x < 2*"*"^, for any x) [27j . 

1.4 Similar Results by Kapoor and Li. Independently of our work, Kapoor and Li [34j obtained 
similar results for Euclidean FT spanners. In particular, they showed that for any low-dimensional 
Euclidean metric, one can build within time 0(nlogn + fen), a A;-FT (1 + e)-spanner with degree 0{k) 
and lightness 0{k'^). Similarly to our result, their running time and degree bounds are optimal. In 
addition, they obtain the optimal lightness bound 0{k'^), while our lightness bound 0{k'^ + klogn) has 
a slack of -^^. However, while the diameter of their spanners is unbounded, our spanners have diameter 
O(logn). Moreover, their result relies heavily on geometric properties of low-dimensional Euclidean 
metrics and thus cannot be extended to doubling metrics, while our result applies to all doubling metrics. 
In particular, the techniques and ideas used in the two papers are inherently different. 

It should be noted that the results of Kapoor and Li [34j were obtained much prior to our resultso 
However, we stress that our results were achieved before this author became aware of the results of 1341. 



1.5 Organization. In Section 2 we define the basic notions and present the notation that is used 
throughout the paper. Section 3 is devoted to our construction of FT spanners with optimal degree. 
More specifically, the description of the construction is given in Section 3.1, whereas its analysis is given 



''Private communication with Sanjiv Kapoor, March 2013. 



in Section 3.2 (degree analysis) and Section 3.3 (fault-tolerance and stretch analysis). In Sections 4 and 5 
we show that small lightness and diameter, respectively, can be obtained using a few simple modifications 
to the construction of Section 3. The running time issue is addressed in Section 6. 

2 Preliminaries 

Let (X, 5) be an arbitrary n-point doubling metric. Without loss of generality, we assume that the 
minimum inter-point distance of X is equal to 1. We denote by A = max^^^gx 6{u, v) the diameter of X. 
A set Y <Z X is called an r -cover of X if for any point x ^ X there is a point y G y , with 5(x, y) < r. A 
set Y is an r -packing if for any pair of distinct points y, y' G Y, it holds that 5{y, y') > r. For ri > r2 > 0, 
we say that a set y C X is an {ri,r2)-net for X if y is both an ri-cover of X and an r2-packing; such a 
net can be constructed by a greedy algorithm. We will use the following standard packing argument. 

Fact 2.1 Let R>2r>0 and letY C X be an r-packing in a ball of radius R. Then, \Y\ < (^)^*^™. 

Hierarchical Nets. We consider the hierarchical nets that are used by Gottlieb and Roditty [30]. Write 
£ = [log5 A], and let {Ni}^^ be a sequence of hierarchical nets, where Nq = X and for each i e [i], Ni 
is a (3 • 5*,5*)-net for A'j-iO For each i € [i], we refer to Ni as the i-level net and the points of Ni are 
called the i-level net points. Note that Nq = X D Ni ^ . . . D N^, and A'^ contains exactly one point. 
The same point of X may have instances in many nets; specifically, an i-level net point is necessarily a 
j-level net point, for every j € [0, i]. When we wish to refer to a specific instance of a point p G X, which 
is determined uniquely by some level i G [0,^] (such that p E Ni), we may denote it by a pair {p,i). 

Net-tree. The hierarchical nets induce a hierarchical tree T = T{X), called net-tree |261ll2j. 
Each node in the net-tree T corresponds to a unique net-point; we will use {p,i) to denote both the net 
point and the corresponding tree node. We refer to the nodes corresponding to the z-level net points as 
the i-level nodes. The only ^-level node is the root of T, and for each i G [i], each {i — l)-level node has 
a parent at level i within distance 3 • 5*; such a node exists since A'j is a 3 • 5*-cover for Ni^i. (We may 
assume that for a pair {p, i + 1), (p, i) of net-points, {p, i + 1) will be the parent of {p, i) in T.) Thus, any 
descendant of every z-level node can reach it by climbing a path of weight at most X^iefji ^ ' ^* — ^ ' ^*- 
By Fact l2.lt since the doubling dimension is constant, each node has only a constant number of children. 
For a tree node v = {p,i), let Ch{v) denote the set of children of v in the net-tree T. 

Net-tree Spanner via Cross Edges. We recap the basic spanner construction H = H{X) of [261112] . 

In order to achieve stretch (1 + e), for each i G [0,£— 1], cross edges are added between i-level nodes that 
are close together with respect to the distance scale 5* at that level. Specifically, for any pair (p, i), {q, i) of 
distinct i-level nodes such that 5{p, q) < 76*, for some parameter 7 = &{-), we add a cross edge between 
(p, i) and {q,i) of weight S{p,q). The basic spanner construction H is obtained as the union of the tree 
edges (those connecting nodes with their children in T) and the cross edges, where an edge between a 
pair of nodes is translated to an edge between the corresponding points. 

By Fact 12. H the degree of any tree node in the spanner H (due to tree and cross edges) is e~'^^'^' . 
Moreover, it can be shown that H has n-e~^^'^' edges [261112]. On the other hand, as the same point may 
have instances in many nets (and thus in many tree nodes), the degree of a point may be unbounded. 

The following lemma from |,26| IT2] gives the essence of the basic cross edges framework. 

Lemma 2.2 (Basic Cross Edges Prame^vork Guarantees Low Stretch) Consider the basic span- 
ner construction H , whose edge set consists of all the tree edges and the cross edges (defined with respect 
to some parameter 7 = 0{-)). For each p,q € X, the spanner H contains a (1 + e)-spanner path Hp^g, 
obtained by climbing up from the leaf nodes {p,0) and {q,0) to some j-level ancestors {p',j) and {q',j), 
respectively, where {p',j) and {q',j) are connected by a cross edge and S{p,q) = ©(-) • S-'. 



■'As mentioned in [30], this choice of parameters is needed in order to achieve running time 0(n log n). 



As mentioned above, the degree of the spanner H is unbounded. To reduce the degree of the spanner, 
we win appoint to each internal node of the net-tree T a surrogate, which is a point in X that is nearby 
(with respect to the distance scale at that level). More specifically, a node {p,i) of T, i € [i], will be 
appointed a surrogate q € X such that 5{p,q) = 0(5*); the surrogate of a node {p,i) will be denoted by 
s{p, i). (For technical convenience, we define the surrogate of a leaf node (p, 0) as p itself, i.e., s{p, 0) = p) 
Another important requirement from a surrogate of an i-level node is that its degree due to cross edges 
at lower levels j E [0, i — 1] would be sufficiently small; we will discuss this issue in detail later on. 

Given a surrogate for each tree node, the basic spanner construction H is translated to its surrogate 
spanner s{H) by replacing each tree edge e = ((p, i + 1), {q, i)) (respectively, cross edge e = {{p, i), {q, i))) 
with its surrogate edge s(e) = {s{p,i + l),s{q,i)) (resp., s(e) = (s(p, i), s(g, i))). We will demonstrate 
(Section 3) that surrogates can be appointed to nodes, so that the resulting surrogate spanner has constant 
degree. Moreover, by increasing the number of surrogates with which each node is appointed from 1 to 
(at most) A: + 1, and thus replacing each edge of the basic spanner i^ by a bipartite clique between the 
corresponding surrogates, we will obtain a A;-FT spanner with optimal degree 0{k). 

Lemma 2.3 (Extended Cross Edges Framework Guarantees Low Stretch) For each p,q £ X, 
consider the {l + e)-spanner path Hp,q in H that is guaranteed by Leninia \2.2[ The corresponding surrogate 
path s{Ilp^q) in s{H), obtained by replacing each edge e ofUp^q by its surrogate edge s{e), is a (l-|-0(e))- 
spanner path (between the same endpoints p and q). We can reduce the stretch of the path from 1 + 0(e) 
back to 1 + e by scaling 7 up by an appropriate constant. 

3 Fault-Tolerant Spanners with Optimal Degree 

In this section we devise a construction of k-FT spanners with optimal degree 0{k). The description of 
the construction is given in Section 3.1, whereas its analysis is given in Section 3.2 (degree analysis) and 
Section 3.3 (fault-tolerance and stretch analysis). 

3.1 The Construction 

3.1.1 The Basic Sceheme. Recall that the weight of i-level cross edges in the basic spanner con- 
struction H is at most 75*, where 7 = 0(7), and define r = [logs tI + 1- Also, let ^ = ^(e, dim) = e'^^'^' 
be an upper bound for the maximum degree of any tree node in the basic spanner H . 

The general approach is to try appointing k + 1 surrogates si(p, i), . . . , Sfc_|_i(p, i) for each tree node 
(p, i), so that for any k node failures in the network, at least one surrogate of (p, i) will be functioning. 
The set S{p, i) = {si{p, i), ■ ■ ■ , Sk+i{p, i)} will be called the surrogate set of {p, i). A surrogate s € S{p, i) 
of an i-level node {p,i) is a point q at distance 6{p,q) = 0(5*) from p, whose degree due to cross edges 
at lower levels j € [0,i — 1] is at most D = (t + 4)^^(2/;; -|- 1); we henceforth refer to D as the degree 
threshold. 

The basic spanner H is given as the union of the tree and cross edges. The FT-spanner construction 
Ti is obtained from H by replacing each edge of H with a bipartite clique. Specifically, every cross 
edge ((p, i), {q, i)) is replaced with a bipartite clique between the corresponding surrogate sets S{p, i) and 
S{q,i). Such a cross edge ((p, i), {q,i)) is referred to as an i-level cross edge (of the basic spanner H). 
Moreover, we may also refer to the edges of the corresponding bipartite clique as cross edges (of the FT 
spanner T-L). Similarly, a tree edge ((p, i + l), (g, i)) is replaced with a bipartite clique between S{p, i + 1) 
and S{q,i); such a tree edge {{p,i + 1), iq,i)) is referred to as an i-level tree edge (of the basic spanner 
H), and we may also refer to the edges of the corresponding bipartite clique as tree edges (of the FT 
spanner T-L). Roughly speaking, each bipartite clique that replaces an i-level tree edge is incarnated in a 
clique that replace some i-level or (i -|- l)-level cross edge; refer to Section 3.2.3 for a rigorous argument. 
For the intuitive discussion of this section we will henceforth restrict our attention to cross edges. 

Next, we describe how to compute the surrogate sets, which is the crux of the problem. 



For a node {p,i), denote by D{p,i) its descendant set, i.e., the set of points in its descendant leaves. 
Note that for each point q € D{p,i), we have 6{p, g) < 4 • 5*. In particular, any point q £ D{p, i) is at a 
small enough distance from p to serve as (p, i)'s surrogate. If there are less than k + 1 points in D{p,i) 
whose degree is at most D, we need to look for surrogates outside D{p,i); in particular, we can look for 
nearby i-level nodes {q,i), with S{p,q) = 0(5*), and try to use somehow their descendant sets D{q,i). 
We remark that in order to achieve /c-fault-tolerance, it is sufficient that the surrogate set S{p, i) of a 
node (p, i) will contain its entire descendant set D{p,i), even if \D(p,i)\ ^ A; + 1. Nevertheless, we will 
see later that even in such cases it is still advantageous for a node to have k + 1 surrogates, if possible. 

The surrogate sets are computed bottom- up, starting at the leaf nodes. For a leaf {p, 0), it is enough 
to take just p to the surrogate set S{p,0), i.e., 5(^,0) = D{p,0) = {p}. More generally, we can take the 
surrogate set S{p, i) to be D{p, i), for small levels i = 0(1) in the tree. However, as we climb up the tree, 
we might not be able to guarantee that S{p,i) contains the entire descendant set D{p,i) due to degree 
violations; in this case it is critical to guarantee that \S{p,i)\ = A; + 1. For any point a £ D{p,i) that 
cannot be taken to the surrogate set S{p,i), its degree must exceed the degree threshold D, which, in 
turn, implies that many cross edges at lower levels are incident on nodes of which a is a surrogate; more 
specifically, since each node may be incident on at most ^ cross edges at each level (in the basic spanner 
H) and D is sufficiently large, it follows that some cross edges at levels smaller than i — r must be incident 
on nodes of which a is a surrogate. Intuitively, any j'-level cross edge between a j-level node (a, j) for 
which a G S{d,j) and some other j-level node {q,j), where j < i — t, should give rise to additional 
points that are close to a and thus also to p, namely, those in D(q,j). Indeed, first note that the distance 
between a and its surrogate a is 0(5-'). Second, the weight of j-level cross edges is at most 75-^, and so 
S{a,q) < 0(5^) + 75^' < 0(5^) + 78*-^ = 0(5*). Hence for any point b G D{q,j), 

d{p,b) < 6{p,a) + 6{a,q) + 6{q,b) < 4 • 5* + 0(5*) + 4 • 5^' = 0(5*). 

This means that we can take the points in D{q,j) of small degree to the surrogate set S{p,i) of {p,i); 
however, if there are points in D{q,j) whose degree exceed D, we will try to apply this argument again. 
Consequently, a surrogate of a node {p,i) need not belong to D{p,i), but rather to a (possibly much 
larger) set F{p,i) which we refer to as the friend set of p. This set F{p,i) will contain 0{k) points of 
small degree that are at distance 0(5*) from p (hence F{p, i) is some subset of 0{k) points from the hall 
set B{p,i) mentioned in Section 1.3). We need to show that whenever the degrees of surrogates of some 
node (p, i) are about to exceed D, there are at least k + 1 points in F{p, i) of small degree which can be 
appointed as new surrogates instead of the old ones, and so the degree bound will always be in check. 

For now assume that the degree of a node (p, i) increases only due to cross edges (the degree contribu- 
tion due to tree edges can be easily controlled, as we shall later see). Consider a cross edge ((p, z), (g, i)), 
which gives rise to a bipartite clique between S{p,i) and S{q,i), and thus increases the degree of each 
point in S{p,i) by \S{q,i)\ units. We will show that \F{q,i)\ > \S{q,i)\, and the key idea is to let {q,i) 
share its friend set with {p,i)- In this way we compensate {p,i) at a value that matches its cost due to 
cross edges. However, note that p and q may be at distance 75* apart (recall that 75* is the upper bound 
on the weight of i- level cross edges), and so the points in F{q, i) may be too far from {p, i) to serve as its 
friends. Thus the points of F{q,i) are not moved immediately to F{p,i), but rather to a temporary set 
R{p,i) called the reserve set of (p, i). All the points in R{p,i) will be moved to F{p,i) within r levels. 
During these r levels in which some point in the reserve set is too far to become a friend, we are going to 
re-appoint the same surrogates over and over. That is, new surrogates of a node are appointed for a long 
term of ^{t) levels, which means that no ancestor of such a node in the next ^{t) levels will appoint 
new surrogates. During this term of ^{t) levels, the points of R{p,i) become closer and closer to the 
respective ancestor of (p, i), until they are close enough to become its friends and thus appointed as its 
surrogates-at this stage new surrogates are appointed to that ancestor, also for a term of r2(r) levels. 

As mentioned in Section 1.3, one may get the wrong impression that our FT spanner Ti contains 
0{k'^n) edges rather than 0{kn) edges. Indeed, each edge (x, y) of the basic spanner H is translated into 
a bipartite clique in 1-i between the corresponding surrogate sets S{x) and S{y). Since S{x) and S{y) 



may contain @{k) points each, the size of such a bipartite chque may be as large as @{k'^). Recalhng that 
the basic spanner has 0(n) edges, it may seem that our FT spanner T-L contains Q{k'^n) edges, which is 
far too much! There are two reasons why the number of edges in our FT spanner is in check. First, it 
turns out that many nodes x have a smah surrogate set S{x); such a node x is called small (see Section 
3.1.2 for more details). Consequently, many edges {x,y) of the basic spanner satisfy |5'(a;)| + \S{y)\ <^ k, 
which implies that many of the bipartite cliques are sparse. Second, even though there are still many 
edges {x, y) in the basic spanner which satisfy |5'(j;)| + \S{y)\ = @{k), we demonstrate that most of them 
are in fact redundant, and such redundant edges need not be replaced by bipartite cliques. The issue of 
redundant edges is related to the notions of leeches and hosts, and is discussed in detail in Section 3.1.3. 

3.1.2 Complete Versus Incomplete, Small Versus Large, Clean Versus Dirty. A node {p,i) is 
called complete if 15(^,^)1 > fc + 1; otherwise IS'd*, i)| < A; + 1, and it is incomplete. A node is called large 
if \F{p,i) U S{p,i)\ > 2k + 2; otherwise \F{p,i) U S{p,i)\ < 2k + 2, and it is small. Since any point of 
F{p, i) can serve as a surrogate, our construction guarantees that any large node must be complete. The 
friend set F{p,i) of {p,i) will contain 0{k) (more specifically, at most 3k + 3) clean 10-friends of {p,i); 
we say that a point g or a node {q, i) is a t- friend of some i-level node {p, i) if 6{p, q) < t • 5*. 

Small and large nodes are handled differently. For a small node {p, i), all points in D{p, i) are appointed 
as surrogates, i.e., we assign S{p,i) = D{p,i). We will show later that D{p,i) C F(p, i)0 This means 
that a small node must have less than 2k + 2 surrogates. Even though we may upper bound the number 
of surrogates by A; + 1, we do not attempt to do this; it turns out that allowing more than k-\-l (but up to 
2k+2) surrogates is useful for simplifying the analysis to some extent. Assuming by induction that S{x) = 
D{x) holds for every child x of (p,i), we have S{p,i) = D{p,i) = Ux'gc/x(p,i) ^(^) = l}x€Ch{p,i) S{x). In 
other words, the old surrogates (from the surrogate sets of (p, i)'s children) are re- used. 

Note that a small node re-uses the surrogates of its children. Similarly to small nodes, we would like 
a large node to re-use the surrogates of (one of) its children. However, sometimes a large node must 
appoint new surrogates (this happens quite rarely). Specifically, an appointment of new surrogates to a 
large node x is made for a long term of at least t + 3 = ^{t) levels; recall that r = [log5 7] -|- 1. During 
this term, each ancestor of x' of x would re-use the same surrogates of x (in fact, x' may choose to use 
the surrogates of another descendant of x'); we call x an appointing node. The surrogates S{x) of x are 
chosen arbitrarily from its friend set F{x), and so S{x) Q F[x). At the end of such a term, k + 1 new 
surrogates are appointed to the corresponding large ancestor y oi x from the friend set of y. We need to 
show that the friend set F{y) of the appointing node y at this stage contains at least A; -|- 1 10-friends of y 
of small degree, which can be appointed as its new surrogates. In fact, we will show something stronger, 
namely, that F[y) contains at least 2k + 2 (rather than k + \) such friends. Hence k + \ arbitrary points 
out of them will be appointed as the new surrogates of y, and the other at least k + 1 such friends may 
be used for compensating neighboring (due to cross edges) nodes. 

At the outset all points are marked as clean. A point p remains clean as long as it is appointed as a 
surrogate of small nodes. However, at the first time p is appointed as a new surrogate of a large node it 
becomes dirty. Once p becomes dirty, it will never be re-appointed as a new surrogate again. Thus, each 
point can be appointed as a new surrogate of at most one large node, and this appointment is for a term 
of at least t + 3 = ^{t) levels. We will make sure that during such a term the degree of any surrogate 
will increase by at most e~ ^ ' ■ {2k + 1) units, and so the degree bound will be in check. 

Our construction will guarantee that either all surrogates of a node are clean, or they are all dirty. 
We henceforth say that a node is clean (respectively, dirty) if all its surrogates are clean (resp., dirty). 
A dirty node will be complete, whereas a clean node may be complete or incomplete. Also, a large node 
will be dirty, whereas a small node is usually (except for a leech) clean; see Section 3.1.3 for more details. 

3.1.3 A Symbiosis Between Leeches and Hosts. Appointing new surrogates to large nodes is 
a costly operation, and should be avoided whenever possible. Specifically, before new surrogates are 



^The equation D{p,i) = S{p,i) C F{p,i) holds for a small non-leech {p,i), but does not necessarily hold for a small leech. 
The definition of a leech (and non-leech) is given in Section 3.1.3. 



appointed to a large node (p,i) (which happens at the beginning of each new term), we look for a dirty 
node {q,i) whose surrogates' term has not finished yet, which is a 24-friend of {p,i), i.e., S{p,q) < 24 • 5*. 
If no such node is found, we appoint k + 1 new surrogates to (p, i) as described above. Otherwise, we 
re-use the surrogates of an arbitrary such 24-friend {q, i) of (p, i) as the surrogates of (p, i), i.e., we assign 
Sip,i) = S{q,i). Observe that {q,i) is dirty and thus also complete; hence this assignment turns {p,i) 
too into a dirty and thus complete node. We say that {q, i) is a leech and {p, i) is its host. 

As mentioned, it is advantageous for a node to have (at least) k + 1 surrogates, or in other words, 
to be complete. We use the leech-host idea described above to turn clean (and possibly incomplete) 
nodes into dirty (and necessarily complete) ones. Specifically, recall that a clean node (p, i) re-uses all 
the surrogates of its children by appointing them as its surrogates. Before this is done, we look for a 
potential host for (p, i), i.e., a dirty non-leech 24-friend (g, i) of (p, i). If no such node is found, we assign 
S{p,i) = D{p,i) as before. Otherwise, we re-use the surrogates of {q,i) as the surrogates of {p,i), i.e., we 
assign S{p,i) = S{q,i), which turns (p, i) into a dirty and complete node. 

A node may be the host of many leeches, whereas a leech has only one host. Moreover, a node cannot 
be both a leech and a host, and it may be neither of them. Being a leech is an inherited trait: If (p, i) is 
a leech of (g, i), then (p, i)'s parent is close enough (i.e., a 24-friend) to become a leech of (g, i)'s parent 
(this is irrelevant if the term of the host's surrogates is over). However, in case (p, i) has a dirty non- leech 
sibling whose surrogates' term is not over, we will prevent (p, i)'s parent from becoming a leech. In this 
case (p, i)'s parent will re-use the surrogates of such a dirty non- leech sibling of (p, i), and will become a 
dirty non-leech. This is the only scenario when we prevent a node from becoming a leech. 

A clean node is necessarily small. On the other hand, a dirty node is not necessarily large. The only 
exception is when the dirty node is a leech. Indeed, a leech may be both small and dirty. On the other 
hand, we will show that a non-leech dirty node must be large (see Lemma l3.14p . We will also show that 
for a clean node (p, i), we have D{p,i) = S{p,i) C F{p,i). For a dirty node, this equation does not hold. 
We remark that a clean node may be complete or incomplete, and it may contain up to 2A:-|- 1 surrogates. 
On the other hand, a dirty node must be complete, and it contains exactly k + 1 surrogates. 

There is an interesting interplay between leeches and hosts. On the negative side, a leech exploits 
the host by using its surrogates and overloading their degree due to cross edges that are incident on that 
leech. However, each host will have at most 0(1)'^^'^' leeches at each level, and so the surrogates' degrees 
due to leeches will be greater than the surrogates' degrees due to the host by a small factor. 
On the bright side, there are important advantages of exploiting the host. First, this allows us to "ignore" 
some cross edges of the basic spanner construction (and reduce the surrogates' degrees), specifically, those 
between leeches and their host as well as between all leeches of the same host; indeed, such cross edges 
connect nodes with the same surrogate set, and are thus redundant. Second, since leeches do not appoint 
new surrogates, the clean friends in F{y) of the corresponding host y will remain clean until the term of its 
surrogates S{y) is over. Consequently, this approach enables y and its non-leech ancestors to accumulate 
more and more clean points in their friend sets. Whenever a new term starts, new host and leeches are 
determined. At this stage we will have enough clean points in F(y) to appoint as surrogates of the new 
host y. Finally, we remark that an ancestor of a leech (respectively, host) can become a host (resp., 
leech). To summarize, there is a symbiosis between leeches and hosts, from which everyone enjoy. 

3.1.4 Putting it All Together. Recall that once the surrogate sets S{x) of all nodes x in T are 
computed, the FT spanner 7i is obtained by replacing each edge of the basic spanner H with a bipartite 
clique. We remark that redundant edges that connect nodes with the same surrogate set are disregarded. 
We next show how to compute the surrogate sets of nodes, by putting all the ingredients that were 
described in Sections 3.1.1-3.1.3 together. The surrogate sets and the auxiliary sets (the descendant, 
friend and reserve sets) are computed bottom-up. That is, we first compute these sets for the 0-level 
nodes (i.e, the leaves of T), then for the 1-level nodes, and so forth. More specifically, we employ Procedure 
Computes ets(^i) to compute these sets for the i-level nodes, for i = 0, . . . ,^. Procedure ComputeSets(^i-^ 
has two parts. The first part of this procedure computes the descendant, friend and reserve sets of the 
i-level nodes. (We omit the computation of the descendant sets of the i-level nodes in the first part of 
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Procedure ComputeSetSi^i^, i G [0,£], as it can be done in a straightforward manner.) Equipped with 
these sets, the second part of Procedure ComputeSets(^i) computes the surrogate sets of the i-level nodes. 

There is a difference between Procedure ComputeSetsm\ (which corresponds to the case i = 0) and 
Prcoedure ComputeSetsf^i-^, for z > 1. We start with describing Procedure C omputeSetS(py 

The first part of Procedure ComputeSetS(Q\ goes over the 0-level (leaf) nodes in an arbitrary order. 
Consider an arbitrary leaf node (p, 0). We first put p in both the reserve set R{p,0) and the friend set 
F{p, 0) of (p, 0). Next, for every cross edge {{p, 0), {q, 0)) that is incident on (p, 0) in the basic spanner H 
(including redundant edges), we put q in the reserve set R{p, 0) of {p, 0). Note that g is a 7- friend of (p, 0). 
If q is also a 10-friend of (p, 0), we add it to the friend set F{p, 0) of {p, 0); we stop once \F{p, 0)| = 3A; + 3. 

Having computed the friend and reserve sets F{p,0) and R{p,0) for all leaf nodes (p, 0), the second 
part of Procedure ComputeSetS{Q-^ starts. As opposed to the first part of the procedure, here it is 
important to handle nodes (p, 0) with |F(p, 0)| > 2/c + 2 (if any) first, and only later handle the rest of 
the nodes. (See the first remark below to understand why this order is important.) Consider a leaf node 
(p, 0). We first look for a potential host for (p, 0), i.e., a dirty non-leech 24-friend (g,0) of (p, 0). 

• If such a node (g, 0) is found, then we assign ^(p, 0) = ^(g, 0), and (p, 0) will be a leech of (g, 0), 
and thus dirty and complete. 

• Otherwise we check whether \F{p, 0)| <2k + 2. 

— If so, (p, 0) will be small and clean, and we assign 5(p, 0) = D{p,0) = {p}. (Notice that 
S{p,0) C F(p,0), and so |F(p,0) U S{p,0)\ <2k + 2, and (p,0) is small by definition.) 

— In the complementary case (i.e., |-F(p, 0)| > 2k + 2) (p, 0) will be large; in this case we appoint 
k + 1 points from F{p,0) as new surrogates of (p, 0) for a term of ^{r) levels (see the second 
remark below), and these points become dirty. Also, (p, 0) itself will be dirty and complete. 

We remind that at the outset all points are marked as clean. A point p becomes dirty when it is appointed 
as a new surrogate of a large node; p will not be re-appointed as a new surrogate again. We say that a 
node is clean (respectively, dirty) if all its surrogates are clean (resp., dirty). 

Next, we describe Procedure C omputeSetS(^iy for i > 1, which computes the surrogate set S{p,i), the 
descendant set D{p,i), the friend set F{p,i) and the reserve set R{p,i), for all i-level nodes (p, i). We 
invoke Procedure ComputeSets(^i^ only after all Procedures ComputeSets(^Q), . . . , ComputeSetS(^i_i) have 
terminated. At this stage, the surrogate set S{q,j), the descendant set D{q,j), the friend set F{q,j) and 
the reserve set R{q,j) have been computed, for all nodes {q,j) at levels j G [0, i — 1]. 

The first part of Procedure C omputeSets u\ goes over the i-level nodes in an arbitrary order. Consider 
an arbitrary z-level node (p, i). We first put in R{p, i) (respectively, F{p, i)) all clean points of R{q, i — 1) 
(resp., F{q,i — 1)), for every child (g, i — 1) of (p, i). In addition, all (clean) points of R{p,i) that are 
10-friends of (p, i) but do not belong to F{p,i) are added to F{p,i); we stop once \F{p,i)\ = 3k + 3. 
This concludes the computation of F{p,i), but the computation of R{p,i) is not over yet. We pause the 
computation of R{p, i) for now, and proceed to computing the friend sets F{x) of all i-level nodes in 
this way. Having computed the friend sets of all i-level nodes, we return to completing the computation 
of R{p,i). For every cross edge {{p,i), iq,i)) that is incident on {p,i) in the basic spanner H (including 
redundant edges), we add to the reserve set R{p,i) of {p,i) all (clean) points from the friend set F{q,i) 
of (g, i) as well as all (clean) 10-friends of (g, i) from the reserve set R{q,i) of (g, i), disregarding points 
that were already in R{p,i). This concludes the computation of R{p,i). 

Observe that any 10-friend of a child (g, i — 1) of (p, i) is also a 10-friend of (p, i) (see Claim [3TT] in Section 
3.2.1). Hence, by construction, all points of F{p,i) are 10-friends of {p,i). Similarly, any (7 + 10)-friend 
of a child {q,i — 1) of {p,i) is also a (7 + 10)-friend (in fact, a 7-friend) of {p,i)- Also, recall that the 
weight of i-level cross edges in the basic spanner H is at most 7-6*. Hence, by construction, all points 
of R{p, i) are (7 + 10)-friends of (p, i). 

Having computed the friend and reserve sets F{p,i) and R{p,i) for all i-level nodes {p,i), the second 
part of Procedure ComputeSets(^i^ starts. As opposed to the first part of the procedure, here it is 
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important to handle nodes {p,i) with \F{p,i)\ >2k + 2 first, and only later handle the rest of the nodes 
(see the first remark below). Consider a node {p,i). The execution of the procedure splits into two cases. 
Case 1: All children of {p,i) are clean. We first look for a potential host for (p, i), i.e., a dirty non- leech 
24-friend (g, i) of (p, i). 

• If such a node (g, i) is found, then we assign S{p, i) = S{q, i), and (p, i) will be a leech of {q, i), and 
thus dirty and complete. 

• Otherwise we check whether \F{p,i)\ < 2k + 2. 

— If so, {p, i) will be small and clean, and we assign S{p, i) = D{p, i). (We will show in Corollary 
13.81 that S{p,i) C F{p,i), and so \F{p,i) U S{p,i)\ < 2A; + 2, and (p, i) is small by definition.) 

— In the complementary case (i.e., \F{p,i)\ > 2/c + 2) (p, i) will be large; in this case we appoint 
k + 1 points from F{p,i) as new surrogates of {p,i) for a term of ^{t) levels (see the second 
remark below), and these points become dirty. Also, (p, i) itself will be dirty and complete. 

Case 2: At least one child of (p, i) is dirty. We first look for the dirty non-leech child {q, i — 1) of (p, i) (if 
any) whose surrogates' term started most recently. (In fact, our analysis shows that any dirty non-leech 
child of (p, i) whose surrogates' term is not over at level i — 1 will do. However, it is more instructive and 
natural to choose the one whose surrogates' term started most recently.) 

• If such a child {q, i — 1) is found and the term of its surrogates is not over at level i — 1, we assign 
S{p,i) = S{q,i — 1). In this case (p, i) becomes a dirty and complete non-leech. 



• 



Otherwise, the term of the surrogates of each dirty non-leech child of {q, i — I) (if any) will be over 
at level i — 1. In this case we proceed similarly to case 1. Specifically, we first look for a potential 
host {q,i) for (p, i), i.e., a dirty non-leech 24-friend {q,i) of {p,i). 

— If such a node (g, i) is found, then we assign S{p, i) = S{q, i), and (p, i) will be a leech of (g, i), 
and thus dirty and complete. 

— Otherwise, we appoint k + 1 points from F{p,i) as new surrogates of (p, i) for a term of f^(r) 
levels (see the second remark below), and these points become dirty. Also, (p, i) itself will be 
dirty and complete. Unlike case 1 where we may have \F(p,i)\ < 2k + 2 and {p,i) will be 
clean, in this case it must hold that \F(p,i)\ > 2k + 2, implying that (p, i) is large, and thus 
dirty and complete. To this end, we will show (see Corollary I3.15P that whenever the need to 
appoint new surrogates for an ancestor (p, i) of a dirty node arises, we have \F{p, i)\ >2k + 2. 

Remarks: 

1. The second part of Procedure ComputeSetsu\ (for any i, including i = 0) handles nodes (p, i) with 
|-^(p, i)| '>2k + 2 (if any) first, and only later handles the rest of the nodes. The reason we handle 
nodes in this order is that when looking for a potential host (q, i) for (p, i), we are in fact looking for 
a dirty non-leech 24-friend of {p^i). However, we do not want (g, i) to become dirty after handling 
(p, i), assuming (p, i) is clean, thus missing a potential host for (p, i). Handling nodes in this order 
guarantees that all the 24-friends of a dirty non-leech node must be dirty as well. 

2. We mentioned that new surrogates of large nodes are appointed for a term of ri(r) levels. The term 
of surrogates consists of two phases. The first phase starts with their appointment, and ends when 
their degree due to non-redundant cross edges (i.e., disregarding cross edges that connect nodes 
with the same surrogate set) since their appointment reaches k + 1. Notice that the degree of a 
surrogate before its appointment at a large node may be positive, but we only consider its degree 
since this appointment. Moreover, observe that the degree of a surrogate may also increase due to 
cross edges that are NOT incident on the relevant host but rather on the leeches of this host. 
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The first phase may end within a single level, but may also last for many levels. When the second 
phase starts, the degree of surrogates (since their appointment) is between k + 1 and k + (^'^ {2k + 1) . 
The second phase lasts precisely r + 2 levels. Thus any term seems to last at least r + 3 levels. 
However, this is true only if these surrogates are re-used over and over, which need not be the 
case in general. Recall that the computation of S{p, i) in Case 2 above started by looking for the 
dirty non- leech child {q,i — 1) of (p, i) whose surrogates' term started most recently, and setting 
Sip,i) = S{q,i — 1) if such a child is found. Consider another non- leech child (r, i — 1) of {p,i)- 
Setting S{p,i) = S{q,i — 1) forces the term of points in S{r,i — 1) to be over at level i — 1. (We 
will show in Claim 13.101 that the surrogate sets of dirty non-leech nodes at the same level are 
pairwise disjoint, and so S{q,i — 1) PI S{r,i — 1) = 0.) But this is fine, because the surrogates 
of S{p, i) = S{q, i — I) that {p, i) chose to re-use are already sufficient for our needs, and so we 
can safely disregard the surrogates of all other dirty non- leech children of [p^i). In particular, this 
approach guarantees that once a large i-level node x appoints to itself A; + 1 new surrogates, no 
ancestor of x at level at most i + t + 2 will appoint to itself new surrogates. 

3.2 Degree Analysis 

In this section we analyze the degree of the spanner construction % described in Section 3.1. 

3.2.1 Getting Started. We start with some basic definitions and claims. For a node x = {p,i), recall 
that p{x) denotes the corresponding net-point p. The distance between two nodes x and y is defined as 
the distance between their net-points p{x) and p{y), i.e., 6{x,y) = 6{p{x),p{y)). The distance between a 
node x and a point p can be defined similarly, i.e., 6{x,p) = 6{p{x),p). Recall that an i-level node x is 
called a t-/nend of another z-level node y (respectively, of a point p) i{6{x,y) < t-5* (resp., 6{x,p) < t-5*). 
For a point p and any i € [0,i], the (i-level) base bag of p is the unique i-level node x such that p G D{x). 

Claim 3.1 (Once a Friend, Al'ways a Friend) (1) If a point p is a 35-friend (let alone a 10-friend) 
of an i-level node x, then it is also a 10-friend of every ancestor of x. (2) If a point p is a {'y + 68) -friend 
(let alone a ^-friend) of x, then it is also a ^-friend of every ancestor of x. 

Proof: Suppose first that p is a 35-friend of x. To prove the first assertion, it suffices to show that p is 
a 10-friend of the parent 7r(x) of x. Indeed, we have 

6{tt{x),p) < 5{tt{x),x)+6{x,p) < 3 • 5*+^ + 35 • 5^ = 10 • 5^+^ 

To prove the second assertion, suppose that p is a (7 + 68)-friend of x. Assuming 7 > 21, we have 

6{7r{x),p) < 6{7r{x),x) + 6{x,p) < 3 • 5*+^ + (7 + 68) ■ 5^ < 7 • 5^+^ | 



Claim 3.2 (Being a Leech is an Inherited Trait) // an i-level node y is a leech of some i-level node 
X, then y's parent iT(y) is a 24-friend of x's parent it{x), and is thus close enough to become its leech. 

Proof: If y is a leech of x, then the net-point p{y) of y is a 24-friend of x. The first assertion of Claim [3TT] 
implies that p{y) is a 10-friend of 7r(x), i.e., 6{p{y), 7r{x)) < 10 • 5*+-*^. Since 6{7r{y),y) = S{'K{y),p{y)) < 
3-5*+\ it follows that 

5(7r(y),7r(x)) < <5(7r(y),p(y)) + ,5(p(y),7r(x)) < 3 • 5^+^ + 10 • 5^+^ < 24-5^+1. | 



Claim 3.3 (Distant Friends Soon Become Close Friends) (1) For any i-level cross edge (x, y) of 
the basic spanner H and any p € S{x),q € S{y), S{p,q) < (7 + 68)5*. In other words, for any i-level 
cross edge (p, q) in the FT spanner %, 6{p, q) < (7 + 68)5*. (2) Let p be a 10-friend of some i-level node 
X. Any point q for which 6{p, g) < (7 + 68)5* is a 10-friend of the {i + T)-level ancestor of x. 
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Proof: The weight of an i-level cross edge {x,y) in H is at most 75*. For any p G S{x), we have 
5{x,p) < 34-5*; refer to Observation 13.91 and the paragraph preceding it to see why this upper bound 
holds. Similarly, we have 5{y, g) < 34 • 5*. Consequently, 5{p, q) < 5{p, x) + 5{x, y) + 5{y, g) < (7 + 68)5*. 
Next, we prove the second assertion. Let x' be the (i + T)-level ancestor of x, and notice that 
<5(x',x) <4-5*+^. Wehave5(x',g) < 6{x',x) + S{x,p) + 6{p,q) < 4-5^+^ + 10-5* + (7 + 68)5^ < 10-5^+^, 
where the last inequality holds for 7 > 3. It follows that g is a 10-friend of x' , and we are done. | 

By construction, a node with at least one dirty child must be dirty too. (See Case 2 in Procedure 
Computes etsu\, i > 1.) This means that all ancestors of a dirty node are dirty, or equivalently, all 
descendants of a clean node are clean. Notice also that the construction guarantees that any dirty node 
must be complete. More specifically, a dirty node has exactly k + 1 surrogates. We summarize these 
observations in the following statement. 

Observation 3.4 (Once Dirty, Always Dirty and Complete) All ancestors of a dirty node (in- 
cluding itself) are dirty. Also, each dirty node has exactly k -\- 1 surrogates, and is thus complete. 

Remark: Note that any large node is dirty. Even though the converse statement holds for non-leech 
nodes (see Lemma 13.141 in Section 3.2.2), it does not necessarily hold for leeches. Nevertheless, it can 
be proved that all ancestors of a (possibly leech) dirty node are in fact large. (This assertion is stronger 
than Observation 13.41 and requires proof; we do not provide the proof of this assertion since we do not 
use it in the sequel.) 

The following observation is implied by Observation 13.41 and the construction. 

Observation 3.5 (The Descendants of Clean Nodes are Surrogates) For any clean node x, we 
have S{x) = D{x). Since any descendant x' of x is clean, it follows that S{x') C S{x). 

Remark: Let p be an arbitrary point, and let i G [0, l]. Observation 13.51 shows that the only clean i-level 
node X (if any) of which p is a surrogate (i.e., p G S{x)) is the i-level base bag of p. Consequently, if the 
z-level base bag of p is dirty, then p will not be a surrogate of j-level clean nodes, for any j > i. 

The next lemma shows that all descendants (and thus all surrogates) of a clean node must be clean. 

Claim 3.6 (All Descendant Points of Clean Nodes are Clean) For a clean j -level node x , all points 
of D{x) are clean at level j. In other words, if a point p is dirty at level j, then the j-level base hag of p 
is dirty too. 

Proof: Suppose for contradiction that there is a point p € D{x) that is dirty at level j, and let z be the 
appointing node which made p dirty. Observe that z is a dirty non-leech z-level node, such that p G S{z) 
and i < j. Let x be the i-level base bag of p, i.e., p € D{x). Note that x is the j-level base bag of p, 
and so X is a descendant of x. By Observation 13. 4| x must be clean. Hence x ^ z. Note also that p is a 
4-friend of x and a 10-friend of z. It follows that x is a 14-friend of z, and would become its leech and 
thus dirty, yielding a contradiction. | 

We have shown in Claim 13.61 that all surrogates of a clean node are clean. Also, all surrogates of a 
dirty node are dirty by the construction. We summarize this property in the following statement. 

Corollary 3.7 All surrogates of a clean (respectively, dirty) node are clean (resp., dirty). 

The following corollary follows from Observation 13.51 Claim 13.61 and the construction. 

Corollary 3.8 For a clean node x, we have S{x) = D{x) Q ^ix), and so \S{x)\ = \D(x)\ < \F{x)\ = 

\F{x)US{x)\ <2k + 2. 

Observation 13.51 implies that all surrogates of a clean node are 4-friends of this node. The surrogates 
of a dirty non-leech node are 10-friends of it, but the surrogates of a (dirty) leech are not necessarily 10- 
friends of it. Since a leech is a 24- friend of its host, it follows that the surrogates of a leech are 34- friends 
of it. We summarize these observations in the following statement. 
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Observation 3.9 All surrogates of either a clean or dirty node are 34-friends of it. 

Recall that our construction makes a persistent effort to re-use old surrogates. In particular, if an 
i-level node x has a dirty non-leech child y, such that the term of the k + 1 surrogates of S{y) is not over 
at level i — 1, then we set S{x) = S{y). (If x has other such children, then it may choose to use surrogates 
from another child.) In this case x will be a dirty non-leech node as well, and we say that x and y are 
copies. Note that y itself may be a copy of one of its dirty non-leech children, and so forth. In general, 
there is a path of dirty non-leech copies in the tree which leads from a dirty non-leech node x down to its 
appointing copy a{x), which is a dirty large node which appoints k + 1 new surrogates. By construction, 
all these non- leech copies are dirty and complete; in fact, we will show in Claim [3^^ 131 that they are large. 

Recall that surrogates of large nodes are appointed for a term of at least r + 3 levels. This does 
not mean that a specific surrogate will necessarily be re-used for i^ir) levels due to an abundance of 
surrogates; see the second remark at the end of Section 3.1.4. This only means that no j-level ancestor of 
an i-level appointing node, for any j < i + r + 2, will appoint to itself new surrogates. We define term{x) 
as the term between the level of the appointing copy a{x) of x and the highest level of any copy of x 
(which is either x or an ancestor of x). By construction, term{x) lasts at least r + 3 levels. 

The "disjointness" properties of Claims 13.101 and 13.111 will be heavily used in the sequel. 

Claim 3.10 (Surrogates and Old Friends are Disjoint) For any pair x,y of (distinct) dirty non- 
leeches at the same level, S{x)r\S{y) = F {a{x)) fl F {a{y)) = 0. More generally, letF*{a{x)) andF*{a{y)) 
denote the set of all 10-friends of a{x) and a{y), respectively. Then F*{a{x)) n F*{a{y)) = 0. 

Proof: Write a(x) = (p, i) and a{y) = {q, j), and suppose without loss of generality that the appointment 
of S{a{x)) = S{x) takes place before the appointment of S{a{y)) = S{y). It must hold that i < j. Let x' 
be the j-level copy of x, with S{x') = S{x). By construction, x' is a dirty non-leech. 

Suppose for contradiction that there is a point s in F*{a{x)) fl F*{a{y)). Hence s is a 10-friend of 
both a{x) and a{y). By Claim [3Tl s is also a 10-friend of x', and so x' and a{y) are 20-friends. It follows 
that a{y) would become a leech of x' , and would not be an appointing node, a contradiction. | 

Claim 3.11 (Dirty Surrogate Sets are Either Equal or Disjoint) Let x be a dirty i-level node. 
For each level j £ [i,i] and any j-level node y, either S{x) = S{y) or S{x) fl S{y) = must hold. 
In the former case S{x) = S{y), y must be dirty. 

Proof: Let y be an arbitrary j-level node. If S{x) D S{y) = 0, then we are done. 

We henceforth assume that S{x) n S{y) ^ 0. We will show that S{x) = S{y), and that y is dirty. 

Define v as x if it is a non-leech, and as the host of x otherwise. We have S{x) = S{v). 

We argue that term{v) cannot be over until level j — 1. Indeed, otherwise no point of S{x) will be a 
surrogate of any j-level node, including y. It follows that S{x) fl S{y) = 0, a contradiction. 

We henceforth assume that term{v) is not over before level j. Consider the j-level copy v' of v, where 
S{v') = S{v) = S{x). Observe that v' is a dirty non-leech. Note also that S{v') fl S{y) ^ 0, and let p be 
a point in S{v') n S{y). Since v' is dirty, p must be dirty too. Claim [3^ implies that y is dirty as well. 

If 2/ = v' , then S{x) = S{y) must hold, and we are done. We henceforth assume that y ^ v'. In 
this case y must be a leech of v' . Indeed, otherwise we have S{v') fl S{y) = by Claim \3A0\ which is a 
contradiction. Since y is a leech of v' , we have S{y) = S{v') = S{x). The corollary follows. | 

Claim 3.12 (Clean 10- Friends of Non-Leeches Remain Clean) Let x be a dirty non-leech i-level 
node. Then all points in F{x) \ S{x) remain clean during the entire term{x). More generally, all the 
10-friends of x that are clean at the beginning of level i will remain clean during the entire term{x), 
except for the surrogates S{x) of x which get dirty in the case when x = a{x) is an appointing node. 

Proof: Let p be an arbitrary 10-friend of x that is clean at the beginning of level i. Suppose for 
contradiction that p became dirty at level i, andp S{x). This means that some other i-level appointing 

15 



node y, y ^ X, appointed p as one of its /c + 1 new surrogates at level i. Since p is a 10-friend of both 
X and y, it follows that x and y are 20-friends. If x is either a non-appointing node (i.e., x ^ o,{x)) or 
it is an appointing node which appoints its surrogates before y does, then y would become x's leech, 
and would not become an appointing node, a contradiction. Otherwise, x is a an appointing node which 
appoints its surrogates after y does, but then x would become y's leech, yielding the same contradiction. 
We have shown that all 10-friends of x (except for those in S{x)) that are clean at the beginning of 
level i will remain clean at the end of level i, and so they will be clean at the beginning of level i + 1. By 
Claim [3^ all these points are 10-friends of vr(x), which is also a non-leech. Thus we can apply the same 
argument for level i + 1, and carry on in this way also for subsequent levels. Consequently, we get that 
all 10-friends of x that are clean at the beginning of level i will remain clean during the entire term{x), 
except for the surrogates S{x) of x which get dirty in the case x = a{x). | 

Claim 3.13 (If the Appointing Copy is Large, All Other Copies are Large Too) Letx he a dirty 
non-leech i-level node. Then there is a path of dirty non-leech copies of x in the tree which leads down from 
X to its appointing copy a{x). Also, all points of F{a{x)) \ S{x) belong to F{x), unless \F[x)\ =2>k + 2>. 
In particular, if a{x) is large, then x will he large too. 

Proof: First, the fact that there is a path of dirty non- leech copies of x in the tree which leads down 
from x to its appointing copy a{x) follows easily from the construction. 

By Claim 13.121 all 10-friends of a(x) that are clean after the appointment of S{x) = S{a{x)) (in 
particular, all points in F{a{x)) \ S{a{x))) remain clean during the entire term{x). Hence they will be 
clean at level i. By construction, all the points in F{a{x))\S{x) will belong to F(x), unless |i^(2;)| = 3A;+3. 

If a{x) is large, then we have \F{a{x)) \ S{x)\ > k -\- 1. Consequently, all the at least A; + 1 points in 
F{a{x)) \ S{x) will belong to F{x), unless |F(x)| =3k + 3. It follows that \F{x) U S{x)\ >2k + 2, and 
so X is large. | 

3.2.2 A Key Lemma and Its Corollary. The following lemma is central in our analysis. In 
particular, it shows that whenever the need to appoint new surrogates for some node x arises, we have 
|F(x)| > 2A; + 2. (See Corollarv l3.151 ) Thus Procedure ComputeSetsi^j^ from Section 3.1.4 is well-defined. 

Lemma 3.14 (All Non-Leeches are Large) Let x he a dirty non-leech i-level node. Then: 
(a) The appointing copy a{x) of x is large, thus x is large too by Claim [WIT3[ (It is possihle that x = a{x).) 
(h) If i is the last level ofterm{x), then \F{x)\ > 2/c + 2. (Note that F{x) = F[x) \ S{x) in this case.) 
Moreover, if \F{x)\ < 3A; + 3, then at least k + 1 points from F{x) do not helong to F{a{x)). 

Proof: The proof of the two assertions of the lemma is by induction on i. 

A dirty node that has only clean children is called atomically- dirty; otherwise it is compound- dirty. For 
the basis of the induction we may consider nodes whose appointing copy is atomically-dirty. Such nodes 
must be large by the construction. (An atomically-dirty non-leech y may get dirty only if |-F(y)| > 2A; + 2, 
in which case y is large by definition.) The first assertion follows immediately. 

To prove the second assertion we use an argument that works for both the basis of the induction and the 
induction step. We omit this argument here for conciseness, but provide it in the induction step. 
Induction Step: Assume that the lemma holds for all smaller values of i,i > 1, and prove it for i. 

We start with the first assertion. We have shown that the case when a(x) is atomically-dirty is trivial. 

We henceforth assume that a{x) is compound-dirty. By definition, a{x) has at least one dirty child. 
Let ia be the level of a(x), with ia < i. Next, we argue that every dirty child of a{x) is either a non-leech 
whose term is over at level z^ — 1, or a leech of some host whose term is over at level ia — 1. Indeed, if 
a{x) had a dirty non-leech child y whose term is not over at level ia — 1, then Procedure ComputeSetS(^i^-^ 
would assign S{a{x)) = S{y), and a{x) would not be an appointing copy, a contradiction. Similarly, if 
a(x) had a dirty child which is a leech of some host y whose term is not over at level ia — 1, then y's parent 
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would be a non-leech by the construction. However, it is easy to see that a{x) would be close enough to 
y's parent to become its leech by Claim [3^ and would not be an appointing copy, a contradiction. 

Consider such a node y of level ia — 1 < i, which is either a dirty non-leech child of a(x) or a 
(dirty) host of a leech child of a{x). We have shown that ia — 1 must be the last level of term{y). 
By the induction hypothesis for y, \F{y)\ > 2k + 2. By construction, all points of F{y) are clean at 
the beginning of level ia — 1. By Claim [3.121 all points of F{y) will remain clean at level ia — 1, and 
thus will be clean at the beginning of level ia- If y is a child of a(x), then for any point s of F{y), 
6{a{x),s) < 6{a{x),y) + 6{y,s) < 3 • 5*" -|- 10 • 5*""-*^ < 5 • 5*" . Otherwise, y is a host of a child c of 
a{x), in which case we have 

5{a{x),s) < 5{a{x),c)+5{c,y) + 6{y,s) < 3 • S^'' -h 24 • 5*""^ -MO • 5*""^ < 10-5*". 

In both cases a{x) has at least 2^-1-2 clean 10-friends at the beginning of level ia, namely, the points of 
F{y). By construction, all these points will belong to F{a(x)), unless \F{a{x))\ = 3A; -|- 3. In either case 
we have |-F(a(x))| > 2A; -|- 2, implying that a{x) is large. The first assertion follows. 

Next, we prove the second assertion. We henceforth assume that i is the last level of term{x). If 
|F(x)| = 3A;-|-3, then we are done. We henceforth assume that |-F(a;)| < 3A;-|-3. The first assertion implies 
that a(x) is large, and so there must be at least k + 1 clean 10-friends of a{x) in F[a{x)) \ S{a{x)). By 
Claim [3^. 131 all these points remain clean during the entire term{x), and they will belong to F(x). 

Consider the last level of the first phase in term{x), denoted /, and let qi, . . . , qk+i be fe -|- 1 arbitrary 
points (among a total of at most k + ^'^ ■ (2A;-|- 1) points) which increased the degree of points in S{a{x)) = 
S{x) since the beginning of term^x) (due to non-redundant cross edges). For each point qj, let Ij be the 
first level in term{x), such that the basic spanner H contains a cross edge between either the Ij-level 
copy Xj of X or one of its leeches and some Ij-level node yj for which both qj £ S{yj) and S{yj) / S{x) 
hold; observe that Ij < I. (For such a non-redundant edge, our FT spanner T-L contains a bipartite clique 
between S{x) and S{yj).) By Claim [3TT| S{yj) (1 S{x) = 0. Moreover, we argue that qj cannot be a 
10-friend of o(x), which implies that it does not belong to F(a{x)). If y^ is a dirty non-leech, this assertion 
follows immediately from Claim 13.101 In the case that yj is a dirty leech, we can apply Claim 13.101 with 
the host of yj instead of yj itself, and get the same result. We henceforth assume that yj is clean. Since 
qj £ S{yj), Observation 13.51 implies that qj is a 4-friend of yj. If qj were a 10-friend of a{x), then it must 
also be a 10-friend of the Ij-level copy Xj of x. Consequently, yj would be a 14- friend of Xj, and would 
thus become its leech and dirty, a contradiction. 

The second phase of term{x) starts at level I + 1, and ends at level i = 1 + t + 2. Suppose first that 
all A; -|- 1 points gi, . . . , qk+i are clean at the beginning of level i — 2 = I + t. In this case the Ij-level 
node yj for which qj G S{yj) must be clean by Corollary 13.71 and the construction, for each j G [A: -|- 1]. 
Moreover, by Claim 13.31 all the k + 1 points qi,- ■ ■ ,qk+i are 10-friends of the {i — 2)-level copy of x. 
Claim [3T] implies that they will also be 10-friends of all the ancestors of that node. Moreover, all these 
points will remain clean until level i by Claim [3.121 Finally, recall that all A: -|- 1 points qi, . . . , qk+i are 
not 10-friends of a(x), and thus they do not belong F{a{x)). On the other hand, we argue that these 
points will belong to F{x) by the construction. Indeed, since there is a cross edge between yj and either 
the Ij-level copy Xj of x or one of its leeches, for each j £ [A; -|- 1], it follows that qj will belong to the 
reserve set of either Xj or one of its leeches. Consequently, qj will also belong to the reserve set of the 
(i — 2)-level copy Xj_2 of x. (The latter assertion is immediate if the cross edge is between yj and Xj. In 
the complementary case where the cross edge is between yj and some leech of Xj, qj will belong to the 
reserve set of the {i — 2)-level ancestor of that leech, denoted Wi-2- If Wi-2 = 3;j_2, then we are done. 
Otherwise, there is a cross edge between Wi-2 and Xj_2. Claim [33] implies that qj is a 10-friend of Wi_2, 
hence our construction guarantees that qj will be added to the reserve set of Xi-2-) Since qj is a 10-friend 
of X and |-F(2;)| < 3A; -|- 3, it follows that qj will belong to F{x). We conclude that all points gi, . . . , qk+i 
belong to F(x), which completes the proof of the second assertion in this case. 

We henceforth assume that some point qj became dirty until level i — 3. Recall that Ij is the first 
level in term{x), such that H contains a non-redundant edge between either the Ij-level copy Xj of x or 
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one of its leeches and some node yj for which both qj £ S{yj) and S{yj) n S{x) = hold. Let /' be the 
first level after Ij (i.e., /'• > Ij) in which the Z'-level copy x'- of x and the /'-level ancestor y'- of yj are 
24- friends. We argue that /'• < i — 2. Indeed, as mentioned above, Claim [3^31 implies that qj is a 10- friend 
of the (i — 2)-level copy of x. Also, by Observation 13. 9|. the fact that qj is in S{yj) implies that it is a 
34- friend of yj. By Claim \3A\ qj is a 10-friend of any ancestor of yj. It follows that the (i — 2)-level copy 
of X and the (i — 2)-level ancestor of yj are 20-friends, and so /'• < i — 2. 

Consider now level Ij = /' — 1, where Ij < Ij < i — 3, and let Xj and yj be the /j-level ancestors of 
Xj and yj, respectively. We argue that S{yj) fl S{x) = 0. Indeed, this assertion clearly holds if Ij = Ij. 
Consider the complementary case Ij > Ij, and suppose for contradiction that S{yj) fl S{x) 7^ 0. Since 
S{x) = S{xj), Claim [3TTT] implies that S{yj) = S{xj) must hold. However, in this case yj must be a leech 
of Xj and thus a 24- friend of it, which stands in contradiction to the above definitions. 

The analysis splits into two main cases. 
Case 1: yj is a clean node. We argue that qj must become dirty at level /'• = Ij + 1 (not before and 
not after). To see this, first note that qj cannot become dirty at any level between Ij and Ij. Indeed, 
otherwise the appointing node that made qj dirty would be a 20-friend of the corresponding ancestor of 
yj, which would become its leech and thus dirty. However, then yj would be dirty too by Observation 13.41 
a contradiction. On the other hand, if qj does not get dirty at level /'• or before, then it must get dirty 
afterwards (because it gets dirty until level i — 3). Suppose for contradiction that some node z at level h 
appoints qj as one of its k + 1 new surrogates, where l'j + 1 < h <i — 2>. This means that 5{z, qj) < 10 • 5 . 
Recall that qj is a 10-friend of any ancestor of yj, and in particular of y',. Also, y' is a 24- friend of x'-, 

and so 5 {x'j,qj) < 5{x'-,y'-) + 8{y'j,qj) < 24 • s'i + 10 • s'^ < 7-5'^+^ < 7 • S'*. (The last inequality 
holds since h > l', + 1.) Let Xh be the h-level copy of x. Observe that 5{xh,qj) < 5{xh,x'-) + 5{x',,qj) < 
4-5'' + 7 ■5'' = 11-5''. Consequently, 6{xh, z) < 5{xh,qj) + S{qj,z) < 11 • S'* + 10 • 5^^ < 21 • 5^. Thus 
Xh and z are 21-friends, and so z would have to become a leech of Xh, and would not be an appointing 
node, a contradiction. It follows that qj becomes dirty at level /' = Ij + 1, as was argued above. 

Denote by u the /'-level appointing node that appoints qj as one of its A; + 1 new surrogates at level 
/'•. By construction, u is a dirty non-leech. By the induction hypothesis, u must be large. Thus there are 
at least A; + 1 clean 10-friends of u in F{u) \ S{u). Claim [3TT0] implies that F{u) fl F{a{x)) = 0. By Claim 
13.131 all the at least k + 1 points in F{u) \ S{u) remain clean during the entire term{u). Moreover, recall 
that y'- is a 24-friend of x' and a 10-friend of qj, and so x'- and qj are 34- friends. Since u is a 10-friend of 
qj, we get that x'- and u are 44- friends. Hence there is a cross edge between x' and u (assuming 7 > 44). 
Since u is dirty, it follows that the second phase of term{x) will start at level /'• + 1 (or before), which 
implies that term{u) will last at least until the last level i of term{x). In particular, all the at least k + 1 
points in F{u)\S{u) will remain clean until level i. Since x'- and u are 44-friends, all points oi F{u)\S{u) 
are 54- friends of x'-. All these points are also 10-friends of the (/'■ + 2)-level copy of x, and let alone of x 
itself. By construction, since there is a cross edge between x'- and u (and as |-F(x)| < 3A; + 3), all points 
of F{u) \ S{u) will belong to F{x). Hence, at least k + 1 points from F{x) do not belong to F{a{x)), and 
we have |-F(x)[ > [F(a(x)) \ S{a{x))\ + \F{u) \ S{u)\ > 2k + 2, which provides the required result. 
Case 2: yj is a dirty node. It is possible that ijj is a leech; in this case we consider the host of ijj. Define 
Uj as yj if it is a non-leech, and as the host of ijj otherwise. By the induction hypothesis, Uj is large, and 
so there are at least k + 1 clean 10-friends in F{a{iij)) \ S{ilj). Moreover, all these points will also belong 
to F{uj) by Claim [3.13| unless |-F(nj)| = 'ik + 3. Recall that x' and y'- are 24-friends. Hence 

5{ij,yj) < 6{xj,x'j) + 5{x'j,yj) + 6{y'j,yj) < 3 • 5'^+^ + 24 • 5'^+^ + 3 • 5^^+^ = 30-5'^+^ = 150 -5'^. 

Note also that 5{yj,Uj) < 24- 5'^, and so Xj and Uj are 174-friends. By construction, there is a cross edge 
between Xj and Uj (assuming 7 > 174), and so all points of F('Uj) will belong to F{x) by the construction. 
Since |-F(x)| < 3k + 3, it must hold that \F{uj)\ < 3A; + 3. It follows that all the at least k + 1 points of 
F{a{itj))\S{ilj) belong to F{uj) (and thus also to F{x)). On the other hand, recall that S{yj)r\S{x) = 0. 



18 



Since S{uj) = S{yj) and S{xj) = S{x), we have Uj ^ Xj. Claim [3?T0l implies that F{a{x))r\F{a{uj)) = 0, 
and so all the at least k + 1 points in F{a{uj)) \ S{uj) belong to F{uj) but do not belong to F{a{x)). 

Suppose first that Ij is not the last level of term{uj). In this case all the at least k + 1 points in 
F{a{uj)) \ S{uj) remain clean at level Ij + 1 by Claim [3.131 However, it is not difficult to see that all 
these points are 10-friends of the {Ij + 2)-level copy of x. Hence, by Claim [3^.121 these points will remain 
clean during the entire term{x). As mentioned, all points of F{a{uj)) \ S{uj) belong to both F{uj) and 
F{x), but not to F{a{x)). Consequently, at least k + 1 points from F{x) do not belong to F{a{x)), and 
we have |-F(3;)| > \F {a{x)) \ S {a{x))\ + \F {a{uj)) \ S {uj)\ >2k + 2. This completes the proof in this case. 

In what follows we assume that Ij is the last level of term{uj). Note that F{uj) = F{uj) \ S{uj). By 
the induction hypothesis, |F(uj)| > 2A; + 2. By Claim [3.121 all points of F{uj) remain clean at level Ij. 
The analysis splits into two subcases. 

Case 2. a: F{a{x)) n F{uj) = 0. In this case some of the points in F{uj) may get dirty at level Ij + 1, 
which occurs if they are appointed as new surrogates of some {Ij + l)-level node. We argue that no more 
than A; + 1 of these points may get dirty at level Ij + ^- Suppose for contradiction otherwise. Since any 
appointing node appoints exactly /c + 1 points as new surrogates, this means that at least two distinct 
{Ij + l)-level appointing nodes vi and V2 must appoint points from F{uj) as their new surrogates. Since 
all points of F{uj) are within distance 10 • 5^ = 2 • 5 J"*"^ from Uj, it follows that they are all within 
distance 4 • 5'^+^ from each other. Since vi (respectively, V2) appoints at least one point pi (resp., P2) 
from F{uj) as a new surrogate, we have 5{vi,pi),5{v2jP2) < 10 ■ S^^"*"^. Hence 

5{vi,V2) < 5{vi,pi) + S{pi,p2) + S{p2,V2) < 10-5'>i+4-5'>i + 10-5'>i = 24 • 5'>^ 

Hence vi and f 2 are 24-friends, and so one would have to become a leech of the other and would not be an 
appointing node, a contradiction. Since \F{uj)\ > 2/c + 2, it follows that at least A: + 1 points from F{uj) 
must be clean at the beginning of level Ij + 2. Moreover, it is not difficult to see that all these points 
are 10-friends of the {Ij + 2)-level copy of x. Hence, they will remain clean during the entire term{x) by 
Claim [3TT2I and will belong to F{x). We have proved that F{x) contains at least 2k + 2 points, at least 
A; + 1 of which do not belong to F{a{x)), which completes the proof in this case. 

Case 2.b: F{a{x)) fl F{uj) 7^ 0. In this case Uj must be a 20-friend of the /j-level copy Xj of x. It is easy 
to see that all points of F{uj) will be 10-friends of the {Ij + l)-level copy of x, and so they will remain 
clean during the entire term{x) by Claim [3.121 By construction, F{x) will contain all points of F{uj). 
We have also shown that all the at least A: + 1 points of F{a{uj)) \ S{uj) belong to F{uj). Finally, Claim 
13. 101 implies that F{a{x)) n F{a{uj)) = 0, and we are done. Lemma [3.141 follows. | 

Lemma [3.14l vields the following corollary, which, in turn, implies that our construction is well-defined. 

Corollary 3.15 (Procedure C omputeSets u\ is Well-Defined) For any appointing node x, we have 
\F{x)\ > 2A + 2. 

Proof: By construction, the statement clearly holds for both leaf nodes and nodes for which all children 
are clean. We henceforth assume that x is an i-level appointing node, for i > 1, with at least one dirty 
child y. Define 2; as y if it is a non-leech, or as y's host otherwise. We argue that term{z) must be over at 
level i — 1. Indeed, otherwise z's parent will be a dirty non-leech, and so x will not become an appointing 
node, a contradiction. (This follows immediately from the construction if y is a non-leech. If y is a leech 
and z is its host, then x would be a 24-friend of z's parent by Claim [3^21 and would become a leech of 
either z's parent or some other i-level dirty non-leech 24-friend of x, and not an appointing node.) 

We have shown that term{z) is over at level i — 1. Hence, Lemma [3. 141 implies that |-F(z)| > 2A -|- 2. 
Moreover, all points of F{z) must remain clean at level i — 1 by Claim 13.121 It is easy to see that all 
points of F{z) are 10-friends of x. Consequently, all these points must belong to F{x) by the construction, 
unless |-F(a;)| = 3A -|- 3. The corollary follows. | 
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3.2.3 Completing the Degree Analysis. In this section we prove that the degree of our FT spanner 
% is at most e~'~^^'^' ■ k. We do this in two stages. In the first stage we bound the degree of "H due to 
cross edges, and in the second stage we show that the degree contribution due to tree edges is negligible. 

First Stage. Denote the degree of an arbitrary point p due to cross edges until level i by degj(p). 
Recall that ^ = e~ ^ ' is an upper bound for the maximum degree of any tree node in the basic spanner 
H. Since the surrogates of any node are 34-friends of that node (see Observation 13. 9p and the set of all 
i-level nodes constitutes a 5*-packing, for each i € [0,£], Fact 12.11 implies that any point can serve as a 
surrogate of at most 0(1)^^ nodes at each level. By construction, the number of surrogates in any node 
is at most 2fe + 1, and so a bipartite clique that replaces a cross edge may increase the degree of each of 
the relevant surrogates by at most 2/c + 1 units. It follows that the degree of any surrogate (due to cross 
edges) may increase by at most ^ • 0(1)'-^''^) • {2k + 1) < C'^{2k + 1) units at each level. 

Recall that D = {t + 4).^^(2fc + 1), and that £ is the last level in the net-tree T (the level of the root). 

In what follows we show that deg^(p) < 2D, for any point p (^ X. 

Lemma 3.16 For any surrogate p G S{x) of a j-level clean node x, we have 6egj{p) < D. 

Proof: Let p be the point in S{x) of maximum degree, i.e., for every point q € S{x), degj(g) < 6egj{p). 

By Observation 13.51 p € D{x), implying that x is the j-level base bag of p. 

If deg(p) < 2^ + 2, then we are done. We henceforth assume that degJp) > 2k + 2. Let i be the minimum 

level such that degj(p) > 2k + 2, and let qi, . . . , q2k+2 be 2/c + 2 arbitrary neighbors of p due to cross 

edges until level i; observe that 2A; + 2 < degj(p) < 2A: + 1 + ^^(2/c + 1). By Claim [331 P is within distance 

(7 + 68)5* from each of the 2A: + 2 points qi, . . . , q2k+2- Moreover, Claim [331 implies that all 2A; + 2 points 

Qi, ■ ■ ■ , Q2k+2 will be 10-friends of the {i + r)-level base bag y of p. Write i' = i + t. 

If all these 2A: + 2 points are clean at the beginning of level i' , then they would all belong to F(y) by the 

construction, unless \F{y)\ = 3A: + 3. (Indeed, Corollarv 13.71 implies that any node yi for which qi G S{yi) 

at level until i' must be clean, for each / € [2A; + 1], and so we have qi G F{yi) by Observation 13.81 Since 

there is a cross edge between p and qi in our FT spanner Ti at level at most i < i' , it follows that qi will 

be added to the reserve set of the corresponding descendant of y, and will eventually be added to F{y), 

unless |-F(y)| = 3/c + 3.) In either case |-F(y)| > 2/c + 2, and so y will be dirty (in fact, it will be large). 

By Observation 13.41 7r(y) and 7r(7r(y)) will be dirty as well. 

Otherwise, at least one point qi becomes dirty before level i' . Let w be the (dirty) appointing node which 

made qi dirty, where qi G S{w), and let w' be the i'-level ancestor of w. By Observation 13.41 w' must be 

dirty. Note that qi is a 10-friend of w, and so it is also a 10-friend of w' by Observation 13.11 Since qi is 

a 10-friend of both y and a w' , it follows that y and w' are 20-friends. If w' is a non-leech, then y will 

become its leech and thus dirty. By Observation 13. 4( 7r(y) and 7r(7r(y)) will be dirty as well. Otherwise 

w' is a leech of some host z, and so w' and z are 24-friends. There are two cases. 

Case 1: term{z) is not over at level i' . By construction, vr(z) will be a dirty non-leech. Observe that 

6{Tr{y),7r{z)) < 6{7r{y),y)+6{y,vu')+6{w' ,z)+d{z,Tr{z)) < 3- 5*'+^ + 20-5^' +24-5^' + 3 -5'^'+^ < 15-5*'+^ 

Hence vr(2/) is a 15-friend of vr(z). In other words, vr(y) is close enough to become a leech of tt{z), and so 
it must be dirty. By Observation 13.41 7r(7r(y)) will be dirty too. 

Case 2: term{z) is over at level i' . By Lemma 13.141 we have |-F(-z)| > 2/c + 2. Also, all the points in 
F{z) = F{z) \ S{z) are clean at the beginning of level i' , and will remain clean at level i' by Claim [3^.121 
For any such point s, we have 

6{TT{TT{y)),s) < 6{7r{7T{y)),y) + 5{y,z) + 5{z,s) < 4 • 5^'+^ + 44 • 5^' + 10 • 5*' < 7-5''+2. 

In other words, all points in F{z) are 7- friends of TT^ir^y)). 

If all these points are clean at the beginning of level i' + 2, then they will belong to F(7r(7r(y))) by the 
construction, unless |F(7r(7r(y)))| = 3/c + 3. (Indeed, there is a cross edge between y and z (assuming 
7 > 44), and so all points of F{z) will be added to the reserve set of y, and will eventually be added 
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to F(7r(7r(y))), unless |F(7r(7r(y)))| = 3k + 3.) Hence 7r(7r(y)) will either become a leech of some dirty 
(i' + 2)-level node or it will become an appointing node. In either case 7r(7r(y)) will be dirty. 
Otherwise, this means that some (i' + l)-level appointing node v made at least one of these points s G F{z) 
dirty at level i' + 1. Since v is an appointing node, both v and tt{v) must be dirty non- leeches by the 
construction. The fact that v appoints s as a new surrogate implies that v and s are 10-friends. Hence 

6{7r{v),s) < 6{tt{v),v)+6{v,s)<3-5''+^ + 10-5''+^ = 5-5''+^. 

It follows that tt{v) is a dirty non-leech (i' + 2)-level node, which is a 5-friend of s. Since s is a 7-friend 
of 7r(7r(y)), we conclude that 7r(7r(y)) is a 12-friend of 7r(w). In other words, 7r(7r(y)) is close enough to 
become a leech of '/r(f), and so it must be dirty. 

Summarizing, we have shown that 7r(7r(y)) is dirty. Note that 7r(7r(y)) is the {i' + 2)-level base 
bag of p and recall that x is the j-level base bag of p. Since x is clean. Observation 13.41 implies that 
j<i'-\-l = i + T + l. Recah that degj(p) < 2A; + 1 + ^'^{2k + 1). Also, in each of the j - i < r + 1 levels 
i + 1, . . . ,j, the degree of p may increase by at most ^^(2A; + 1) units, and so 

degjip) < degi{p) + {T + l)f{2k + l) < 2k + 1 + f{2k + 1) + {t + l)f{2k + 1) < D. | 

Let i be the first level in which p becomes dirty. (If no such i exists, we can define i = £ + 1.) 

By construction, p is appointed as a new surrogate of a large (and thus dirty) i-level appointing node 
X. Corollarv 13.71 implies that p cannot be a surrogate of dirty nodes before level i, and so degj_^(p) < D 
must hold by Lemma [3. 161 In the degenerate case when p is not appointed as a surrogate of dirty nodes 
(i.e., i = i + 1), we have deg£(p) = degj_i(p) < D, and we are done. We henceforth assume that i < i. 

Recall that p is appointed at level i for a term of at least r + 3 levels, which consists of two phases. 
The first phase starts at level i, and ends when the degree of p due to (non-redundant) cross edges since 
its appointment at level i reaches fc + 1. When the second phase starts, the degree of p is between k + 1 
and k + ^^{2k + 1). The second phase lasts r + 2 levels. In each of these levels p may incur ^^{2k + 1) 
additional units to its degree. Consequently, when the term of p is over, the degree of p due to cross 
edges since its appointment is bounded above by A; + i'^{2k + 1) + (r + 2)^^(2fc + 1) < D. (In fact, it is 
possible that p does not finish its term due to abundance of surrogates; see the second remark at the end 
of Section 3.1.4. Thus we can refer to term{x) instead of the term oip.) When p was appointed as a new 
surrogate of the large i-level node x (at level i), it was marked as dirty. Therefore, by construction, p 
will not be re-appointed again as a surrogate (of either clean nodes or dirty ones) after term{x) is over. 

Summarizing, the degree of p may increase by at most D units while it is a surrogate of clean nodes, 
and by at most D additional units while it is a surrogate of dirty nodes. It follows that 6&g^{p) < 2D. 

Second Stage. Consider a tree edge (x, 'k{x)) between a node x = {p,j — 1) and its parent tt(x) = {q,j) 
in the tree. This edge is translated into a bipartite clique Cx between S{x) and S{-k(x)) in our FT spanner 
7i. If S{x) = S{tt{x)), then this edge is redundant and we do not replace it by a bipartite clique. 

Next, we argue that the degree of a point p in V. due to tree edges is small. To this end we analyze 
the degree of p over all cliques Cx that correspond to tree edges {x,7r{x)). We say that Cx is a j-level 
clique if tt{x) is a j-level node (that is, the level of the clique Cx is determined by the level of vr(x)). 

Let i be the first level in which p becomes dirty. If p does not become dirty, then we define i = i + 1. 
By Corollarv 13.71 p may only be a surrogate of clean nodes in levels 0, . . . , i — 1, whereas it may only be a 
surrogate of dirty nodes in levels i, . . . ,i. Note that the j-level base bag of p, for j < i, is not necessarily 
clean. Let / be the first level in which the l-level base bag of p is dirty, and assuming I > 1, let z denote 
the (/ — l)-level base bag of p. Notice that all ancestors of z are base bags of p, and they are dirty by 
Observation 13.41 Since z is clean, Observation 13.41 implies that all the descendants of z are clean too. 
Claim [3T6l implies that / < i. Moreover, p cannot be a surrogate of any j-level node, for all j G [i,i — 1]. 

We first analyze the degree of p over all cliques until level I — 1, i.e., over j-level cliques Cx that 
correspond to tree edges (x, Tr{x)), where 'ir{x) is a j-level node and j < / — 1, and p belongs to either S{x) 
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or S{Tr{x)). Observation 13.51 implies that 7r(x) is the j-level base bag of p. Consequently, both x and 'ir{x) 
must be clean. Notice that 7r(x) must be a descendant of the (/ — l)-level base bag z of p. Observation 13.51 
implies that S{x) C S{7r{x)) C S{z). Consequently, the clique Cx that corresponds to the edge (x,7r(x)) 
is contained in the internal clique over S{z), which includes an edge between any pair of points from S{z). 
It follows that all cliques Cx that may increase p's degree until level I — 1 are contained in the internal 
clique over S{z). Corollarv 13.81 implies that \S{z)\ < 2k + 2. Hence the degree of p over all cliques Cx 
until level / — 1 is bounded above by 2 A;. 

For a fixed j, the degree of p due to all j-level cliques Cx may increase by at most 0{1)^ ' ■ {2k + 1) 
units. (This is because (i) p may serve as a surrogate of at most O(l)*^''^'' nodes at each level, (ii) each 
tree node has at most 0{1)^ ' children, and (iii) each node has at most 2/c + l surrogates.) In particular, 
the degree of p due to all /-level cliques (where x and 7r(x) are in levels / — 1 and /, respectively) is at most 
Q{l"jO(d) . ^2k + 1). Similarly, the degree of p due to all i-level cliques (where x and 7r(x) are in levels i — 1 
and i, respectively) is also in check. Recall also that p cannot be a surrogate of any j'-level node, for all 
j G [Z,i — 1]. Consequently, the degree of p over all cliques Ca; until level i is at most 2^+0(1)^"^) -(2^-1-1). 

In what follows we analyze the degree of p over all cliques of level at least i + 1, i.e., over j-level cliques 
Cx that correspond to tree edges {x,7r{x)), where 7r(x) is a j-level node, for j > i + I, and p belongs to 
either S{x) or S{tt{x)). 

By definition, p is appointed as a surrogate of a large i-level node, denoted y, and subsequently 
becomes dirty. The degree of p may increase due to tree edges during term{y). However, our construction 
guarantees that p will not become a surrogate of any node after term{y) is over. Let i' denote the last 
level of term{y), let y' be the z'-level ancestor of y, and let H = liy^y' be the path between y and y' in 
the net-tree T. Observe that cliques of level larger than i' + 1 cannot increase the degree of p, and so it 
suffices to bound the degree of p over all cliques of level between i + 1 and i' + 1. 

In level i' + 1 (which is the last level of interest to us) the degree of p will increase by at most 
Q^l^O{d) . (^2k + l) units. Consider now a j-level clique Cx that corresponds to a tree edge (x, '/r(x)), where 
7r(x) is a j-level node, for j G [z + !,«'], and p belongs to either S{x) or S{'it{x)). We also assume that 
the edge (x,7r(x)) is non-redundant, i.e., S{x) / S{'it{x)). We argue that the clique Cx is incarnated in 
some clique that corresponds to either a (j — l)-level cross edge or a j-level cross edge. Since we have 
already shown that the degree of p due to cross edges is in check, proving this assertion would imply that 
the degree of p due to tree edges is in check as well, thus completing the degree analysis. 

Observe that all nodes along the path H are dirty non-leech copies of y. Moreover, by Claim 13.111 
for any j-level node v, where j € [i,i'], either S{v) = S{y) or S{v) n S{y) = must hold, and in the 
former case Claim [3^. 101 implies that v is either the j-level copy of y or one of its leeches. In particular, if 
p belongs to S{v), then we have S{v) = S{y). Consequently, if p belongs to both S{x) and S{7r{x)), then 
we have S{x) = S{tt{x)) = S{y), and so the edge (x,7r(x)) is redundant. We henceforth assume that p 
belongs to either S{x) or S{tt{x)), but not to both, and so S{x) fl S{tt{x)) = 0. This means that x cannot 
belong to H, as otherwise 7r(x) would belong to H too, and the edge (x,7r(x)) would be redundant. 

Suppose next that x does not belong to H but 7r(x) belongs to H. In this case 7r(x) has a dirty 
non-leech child u in H, with S{u) = S{Tr{x)) = S{y). Since x and u are siblings, they must be 7-friends 
(assuming 7 > 30). Hence they are connected by a cross edge in the basic spanner H, and so Cx is 
incarnated in the clique Cx,u that corresponds to the (j — l)-level cross edge (x,n). 

We may henceforth assume that neither x nor 7r(x) belong to H. The first case is that p belongs to 
5(x) but does not belong to S'(7r(x)). In this case x is a leech of the (j — l)-level copy yj-i of y, and so 
6{x,yj-i) < 24 • 5-'^^. Let yj denote the j-level copy of y, and note that yj = 7r(yj_i). We have 

S{yj,TT{x)) < 5{yj,yj^i) + 6{yj-i,x)+5{x,Tr{x)) < 3 • 5-'' + 24 • 5^-i + 3 • 5-'' < 11 • 5-''. 

Hence 7r(x) is an 11-friend of the dirty non-leech yj, and so it must be a leech too by the construction. 
Note that the host h of 7r(x) cannot be yj, otherwise the edge (x,7r(x)) would be redundant. Observe 
also that 6{yj,h) < 6{yj,-K(x)) + 6{'ir{x),h) < 11 • 5-^ + 24 • 5-' = 35 • 5-^. In other words, yj and h are 



22 



7" friends (assuming 7 > 35). Thus they are connected by a cross edge in the basic spanner H, and so Cx 
is incarnated in the chque Cy_^^h that corresponds to the j-level cross edge {yj,h). 

The remaining case is that p does not belong to S{x) but belongs to S{Tr{x)). Thus 7r(x) is a leech of 
the j-level copy yj of y, and so 5{yj, 7r{x)) < 24 • S-' and 5(7r(x)) = S{yj) = S{yj-i). We have 

5{yj-i,x) < 5{yj-i,yj) + 5{yj, Tr{x)) + 6{tt{x),x) < 3 • 5^' + 24 • 5^' + 3 • 5^' = 150 • 5^"^ 

In other words, yj-i and x are 7- friends (assuming 7 > 150). Thus they are connected by a cross edge in 
the basic spanner H, and so Cx is incarnated in the clique Cy._-^^^x that corresponds to the (j — l)-level 
cross edge {yj-i,x). This concludes the proof of the above assertion and completes the degree analysis. 

3.3 Fault-Tolerance and Stretch 

In this section we show that 7^ is a A;-FT (1 + e)-spanner for {X,5). To this end we show that for any 
pair p,q (^ X \F oi functioning points (where \F\ < k), there is a (1 + e)-spanner path in 'H\F. 

Consider the (1 + e)-spanner path Ilp^q between p and q in the basic spanner H that is guaranteed 
by Lemma |2.2[ The path Xlp^g is obtained by climbing up from the leaf nodes (p, 0) and {q,0) to some 
j-level ancestors (p',j) and {q',j), respectively, which are connected by a cross edge {{p' , j) , {q' , j)) ■ By 
Observation 13. 5| p is a surrogate of every clean node along the sub-path of Up^q that climbs from (p, 0) to 
{p' ,j). Also, every dirty node along this path is complete, hence it has k -\- 1 surrogates, at least one of 
which must function. Since every edge along this path is translated into a bipartite clique in T-L between 
the corresponding surrogate sets, we obtain this way a functioning path that starts at p and ends at an 
arbitrarily chosen surrogate p € S{p' ,j) \F of {p' ,j)- Similarly, we obtain a functioning path that starts 
at q and ends at an arbitrarily chosen surrogate q G S{q' ,j) \F of {q' ■,])■ The cross edge between p and 
qml-i is functioning too, i.e., {p, q) G 7i\ F. (In the degenerate case where S{p' ,j) = S{q' ,j), the cross 
edge between {p',j) and {q',j) in H is redundant, and we do not translate it into a bipartite clique in T-L. 
Hence, the edge {p,q) may not belong to Ti. However, in this case we can simply take p = q.) In this 
way we obtain a functioning path s{Ilp^q) between p and q in our FT spanner T-L. Observation 13.91 implies 
that any node along the original path Hp^q in // is a 34-friend of all its surrogates (and in particular, of 
all its functioning surrogates). Lemma 12.31 implies that s{Ilp^q) is a (1 + 0(e))-spanner path between p 
and q, but we can reduce the stretch to 1 + e by scaling 7 up by some constant. 

4 Lightness 

The radius rad{x) of an i- level node is its distance scale; we have rad{x) = 5% but in most other papers 
(such as (26lll2j) rad{x) is equal to 2*. The standard analysis of [12] (see also [Ml HU [15] ) implies that 
the sum of radii of all tree nodes is O(logn) • oj{MST{X)). Since the degree of any tree node in the basic 
spanner construction H is e^ '^ and since all edges in H that are incident on a node x have weight at 
most O(-) • rad{x), it follows that the lightness of H is bounded above by e~^ ' ■ log n. Our FT spanner 
construction Ti replaces each edge (x,y) in iJ by a bipartite clique of size O(fe^) between S{x) and S{y). 
By Observation 13.91 the weight of each of the 0{k'^) edges of the clique exceeds the weight (jj{x, y) of the 
original edge by an additive factor of at most 34 • {rad{x) + rad{y)) = 0{rad{x) + rad{y)). Hence the 
lightness of our FT spanner Ti is bounded by e^^ ' ■ k"^ logn. (See [15] for a detailed argument.) 

To obtain the desired lightness bound of e~^'^'{k'^ + fclogn), we need to work harder. The key idea is 
to replace each bipartite clique by a bipartite matching. We can do this "matching replacement" only for 
edges (x, y) where both nodes x and y are complete. Note that complete nodes are not necessarily dirty. 
For technical reasons it is more convenient to do this matching replacement for edges (x, y) where both 
nodes x and y are dirty. In particular, the surrogate set of a dirty node contains exactly k + 1 points (see 
Observation 13. 4p . In this case |S'(a;)| = \S{y)\ = k + 1, and we will use a perfect bipartite matching (of 
size A; + 1) to connect S{x) with S{y). If x or y (or both) are clean, we will connect S{x) and S{y) by a 
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bipartite clique as before. Using a bipartite matching instead of a bipartite clique shaves a factor of k in 
the lightness bound; more specifically, the total lightness of all the bipartite matchings is e~^^'^^ ■ k log n. 

Next, we analyze the lightness of the bipartite cliques. Each such clique corresponds to an edge {x, y) 
of H, in which either x or y (or both) are clean. We charge the total weight of all the clique edges with 
the clean nodes among x and y. In what follows we bound the total charge W over all clean nodes. 

Recall that all descendants of a clean node are clean as well (see Observation 13. 4p . For a clean node 
X, let W{x) denote the total charge over x and all its descendants. In other words, W{x) stands for the 
total weight of clique edges that correspond to edges of H that are incident on either x or its descendants. 

Lemma 4.1 For a clean i-level node x, we have W{x) < e~'^^'^' • k"^ ■ rad{x). 

Proof: Let m{x) denote the number of edges in % that correspond to edges of H that are incident on 
either x or its descendants. Observation 13.51 implies that for any descendant x' of x, S{x') C S{x). It 
follows that m(x) < 'Ylip^s(x) degj(p), where degj(p) stands for the total degree of a point p due to cross 
edges until level i and due to tree edges until level i + 1 (i.e., including the edge (x, 7r(x))). Recall that 
degj(p) stands for the degree of a point p due to cross edges until level i. By Lemma [3. 161 deg,j(p) < D, 
for each p € S{x). We have also shown that the degree of such a point p due to tree edges until 
level i + 1 (including the edge {x,it{x))) is bounded above by 2k + 0(1)'^('^) • {2k + 1). We thus have 
degj(p) < degiip) + 2k + 0(1)'^('^) • {2k + 1) < e-^^'^) • k. By construction, \S{x)\ <2k + l. It follows that 

m(x) < Yj ^^iP) ^ Yl e"^^'^^-^ < (2A: + 1) • (e-^^'^) • A;) < e'^^'^^ ■ k^ . 

p€S{x) p£S{x) 

By Claim 13.31 each of the cross edges in 7i that increase p's degree until level i has weight at most 
(7 + 68)5*. (In fact, since x is clean, S{x) = D{x). Hence the distance between x and its surrogates is 
at most 4 • 5*, and so the weight of these edges is at most (7 + 4 + 34)5* = (7 + 38)5*.) Also, since the 
distance between any two surrogates of S{x) is at most 8-5*, each of the tree edges in Ti that increase 
p's degree until level i has weight at most 8-5*. By Observation 13. 9^ the surrogates of tt{x) are 34- 
friends of it, hence the edges of Ti that correspond to the tree edge (x,7r(x)) in H have weight at most 
4-5*+3-5*+^+34-5*+^ = 189-5* < (7+68)5*; this inequality holds for 7 > 121. Recall also that rad(x) = 5*. 
We conclude that the total weight of all m{x) edges is at most m{x){'y + 68)5* = e"'^^'^' • k"^ ■ rad{x). | 

A clean node is called almost- dirty if its parent in T is dirty. Let A be the set of all almost-dirty nodes 
in T. By Observation 13.41 for any pair x,y ^ Aoi distinct almost-dirty nodes, neither one of them can be 
an ancestor of the other. Moreover, any clean node z ^ A that is not almost-dirty is a descendant of a 
single almost-dirty node, which implies that the total charge W of all clean nodes is equal to X^^g^ W{x). 
By Lemma SH we have W = Y^xeA ^i^) < e"^^'^^ " ^^ • T.x<^A rad{x). 

Next, we show that ExgA™^(^) = 0{uj{MST{X))), which implies that W < e-^^'^^ ■k'^-uj{MST{X)). 
Since the total weight of the bipartite cliques is at most W , the desired lightness bound would follow. 

The following lemma implies that the net-points p{x),p{y) that correspond to a pair x,y S yl of 
distinct almost-dirty nodes are far away from each other, and in particular distinct (i.e., p{x) 7^ p{y))- 

Lemma 4.2 (Almost-Dirty Nodes are Far Away From Each Other) For any pair {p,i), {q,j) of 
distinct nodes from A, with i < j, we have 5{p,q) > 5^^^ = ^'■^' . 

Proof: Notice that both p and q belong to the i-level net Ni. Since Ni a 5*-packing, we have 5{p, g) > 5*. 
If i ^ J — 1) then we are done. We henceforth assume that i < j — 2. 

Suppose for contradiction that 5{p,q) < 5^~^. Let {r,j — 1) be the {j — l)-level ancestor of {p,i). 
Since j — 1 > i + 1, Observation 13.41 implies that {r,j — 1) must be dirty. We have 6{r,p) < 4 • 5-^"^, and 
so 5(r, q) < 5{r,p) + 6{p, g) < 4 • 5^~^ + 5-'"-'^ = 5 • 5^"^. Note also that (g, j — 1) is a clean child of {q,j)- 

If {r,j — 1) is a non-leech, then {q,j — 1) would have to become its leech (since {q,j — 1) and {r,j — 1) 
are 5-friends) and thus dirty, a contradiction. We may henceforth assume that {r,j — 1) is a leech of some 
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(j — l)-level node {h,j — 1). By construction, we have 5(r, /i) < 24 • 5^ ^. There are two cases. 
Case 1: The parent {'jr{h),j) of {h,j — 1) is a non-leech. Notice that 

6{Tr{h),q) < 6{'iT{h),h)+6{h,r)+6{r,q) < 3 • 5^' + 24 • 5^"^ + 5 • 5^'^^ < 9 • 5^'. 

This means that {q,j) is a 9-friend of (7r(/i), j), and would become its leech and thus dirty, a contradiction. 
Case 2: The parent {n{h) , j) of {h, j — 1) is a leech. By construction, the term of the surrogates of {h, j — 1) 
must be over at level j — 1. Lemma [3.141 implies that \F{h,j — 1)| > 2k + 2. Also, all points of F{h,j — 1) 
remain clean at level j — Ihy Claim [3T2l By construction, each point of F{h,j — 1) is a (clean) 10-friend 
of {h,j — 1). Moreover, each point s E F{h,j — 1) is an 8-friend of {q,j); to see this, note that 

6{s,q) < 6{s,h) + 6{h,r) + 6{r,q) < 10 • 5^"^ + 24 • 5^"^ + 5 • S-'"^ < 8 • S-^'. 

Observe also that 6{h,q) < 6{h,r) + 5{r,q) < 24 • 5^-^ + 5 • 5^"^ = 29-5J"^ Hence {h,j-l) and {q,j-l) 
are 29-friends, and so there is a cross edge between them in the basic spanner H (assuming 7 > 29). By 
construction, all the at least 2A; + 2 points of F{h,j — 1) will be added to the reserve set R{q,j — 1) of 
(g, j — 1). Moreover, all these points will be subsequently added to F{q,j), unless \F{q,j)\ = 3k -\- 3. In 
any case {q,j) will be large, and thus dirty, a contradiction. The lemma follows. | 

Let Xa C X be the set of net-points that correspond to nodes in A, i.e., Xa = {pix) | x G A}. 
Consider the MST{Xa) of {Xa,S), and note that uj{MST{Xa))) < 2 • uj{MST{X)). Let rt be an 
arbitrary node in A. We root MST{Xa) at p{rt), and orient all the edges towards p{rt). In this way 
for each node x £ A\ {rt}, the corresponding net-point p{x) has a single outgoing edge in MST{Xa), 
denoted e{x). By Lemma|121 ^{g{x)) > !IfLi£2. Also, for any pair x,y £ A of distinct almost-dirty nodes, 
their corresponding net-points p{x) and p{y) are distinct, which implies that the corresponding outgoing 

edges e{x) and e{y) are distinct as well. Hence uj{MST{Xa)) = Yl,x€A\{rt} ^i^i^)) — Y^xeA\{rt} ''" 5 ■ 
Finally, note that rad{rt) < uj{MST{X)). It follows that J^xeA^^^dix) = 0{u}{MST{X))). 

Denote by H the spanner obtained from Ti by replacing the bipartite cliques with bipartite matchings, 
whenever possible. The above discussion shows that ii achieves the desired lightness bound e~'-^^'^' {k"^ + 
klogn). Also, the degree of H is no greater than the degree of H, and so it is in check too. Finally, we 
can guarantee that Ti will be a k-FT (1 + e)-spanner using a simple adjustment, namely, connect the 
surrogate set S{x) of each dirty leaf x via an internal clique (which includes an edge between any pair 
of points from S{x)). It is easy to see that this adjustment does not increase the degree and lightness by 
more than constants. Indeed, any point p may be a surrogate of at most 0(1)*^'-'^' leaves, and so its degree 
due to the internal cliques will increase by an additive factor of 0{1)^ ' ■ k. In particular, this means 
that the number of edges due to the internal cliques is bounded above by 0{1)^^'^' ■ kn. By Observation 
13.91 any such edge has weight at most 2(34 •S'^) = 0(1), and so the total weight due to the internal cliques 
is at most 0(1)<^('^) • kn < 0(1)'^('^) • k ■ uj{MST{X)), where the last inequality follows from the fact that 
the minimum inter-point distance of X is equal to 1. Hence, the lightness will be in check as well. 

Next, we show that for any pair p,q £ X\F oi functioning points (where \F\ < k), there is a (1 + e)- 
spanner path in T-L\F. Consider the (1 + e)-spanner path Hp,q between p and q in the basic spanner H 
that is guaranteed by Lemma 12.21 obtained by climbing up from the leaf nodes (p, 0) and (g, 0) to some 
j-level ancestors {p',j) and {q',j), respectively, which are connected by a cross edge {{p',j), {q',j))- 

Consider first the sub-path H^j,/ of Hp^g that climbs from {p,0) to {p',j). We argue that there is a 
short functioning path from p to some point in S{p',j) \F. Note that p is a surrogate of every clean node 
along this path. The case when {p',j) is clean is immediate. Suppose that {p',j) is dirty, and consider 
the highest clean ancestor x^^' of (p, 0) along Hpy, and its dirty parent x^^' = irlx^^)). Observation 13.51 
implies that p belongs to S{x^^'). By Observation 13.41 |5(j;^^^ | = k + l. There is a bipartite clique between 
S{x^^') and S{x^^') by the construction, and so p is connected to each of the k + l points of S{x^^'). We 
have disregarded the case where x^^' = {p, 0) is a dirty leaf. Recall that our adjustment added an internal 
clique for each dirty leaf. Hence, in this case p is connected to each of the other k points of S{x^^'). 

By Observation 13.41 all ancestors of x^^^' are dirty. Let x^^' be the highest (dirty) ancestor of x'^-* 
along Hpy with the same surrogate set as x^^' , i.e., S{x^^') = S{x^^'). (It is possible that x^^' = x^^' .) 
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Let x^"^' = -7r(x'^^) be the parent of x'^\ and let x"^ be the highest (dirty) ancestor of x'^' along Ilpy 
with the same surrogate set as x'^-*, i.e., S{x^'^') = S{x^'^'). (It is possible that x^"^' = x'^^' .) By definition, 
5(x(2)) = 5(x(2)) / 5(x(i)) = 5(x(i)). Moreover, Claim EH] implies that S{x(^^) n S{x^^^) = 0. By 
construction, |S'(x^"'^')| = |5(x^^^)| = k + 1, and there is a perfect bipartite matching (of size A; + 1) 
between S{x^^^) = 5(x(^)) and 5(x(2)) = 5(x(2)). Similarly, let x(3) = 7r(x(2)) be the parent of x^^), 
and let x^^^ be the highest (dirty) ancestor of x*^'^^ along n^y with the same surrogate set as x^^' , i.e., 
5(^(3)) = S'(x(3)). By definition, 

5(x(3)) = 5(x(3)) / 5(x(2)) = S'(x(2)) / ^(^(i)) = 5(x(i)) ^ 5(x(3)). 

Moreover, Claim [3^. 11 1 implies that 

5(x(2))n5(x(^)) = 5(xW)n5(x(3)) = 5(xW)n5(x(2)) = 0. 

By construction, |5(x^^^)| = |5(x(3)^| = k + 1, and there is a perfect bipartite matching (of size k + 1) 
between ^(x*-^)) = S{x^'^') and S{x^^') = S{x^^'). It follows that there are k -\- 1 vertex-disjoint paths 
between S{x^^') and S{x^^'). 

We continue this way until we reach x^'^ = {p',j)- By applying this argument inductively, we get k + 1 
vertex-disjoint paths between S{x^^') and S{x^''') = S{p',j). Since |F| < k (i.e., there are at most k faulty 
points), at least one of these paths must function. Recall also that p is connected to all points of ^(x'^)), 
which means that there is a path in 'H\F between p and some functioning point p of S{p',j). Moreover, 
this functioning path is a (1 + 0(e))-spanner path by Lemma 12.31 and we can reduce the stretch to 1 + e 
by scaling 7 up by some constant. This proves the above assertion, but we are not done yet. In exactly 
the same way as above, it can be shown that there is a functioning (1 + e)-spanner path between q and 
some functioning point q of S{q',j). However, the cross edge {p,q) need not be in our spanner Ti. (This 
is because we use bipartite matchings rather than bipartite cliques, whenever possible.) Consequently, 
it may be impossible to glue these two functioning paths together via the edge {p, q) . We can easily 
overcome this hurdle in the degenerate case where either {p',j) or {q',j) (or both) are clean. Indeed, 
suppose without loss of generality that {p',j) is clean. In this case p belongs to S{p',j). Moreover, by 
construction, there is a bipartite clique between S{p' ,j) and S{q' ,j), and so p is connected via cross edges 
to all points of S{q',j). If {q',j) is clean too, then there is a direct edge between p and q. Otherwise, 
we can use the above functioning (1 + e)-spanner path between q and q, and then get from q to p via a 
direct edge. We thus obtain a short functioning path between p and q, as required. We will next show 
how to overcome the above hurdle in the more interesting case where both {p',j) and {q',j) are dirty. 

The above argument handles the two sub-paths Hp^p' (between p and p') and 11^^/ (between q and 
q') of Ilp^g separately. More specifically, it first builds a short functioning path for each of these two 
sub-paths of Ilp^g, and then it tries to glue these sub-paths together into a single functioning path using 
a possibly non-existing cross edge {p,q) (i.e., {p,q) may not belong to 7i). Instead of breaking the path 
Hp^q into two sub-paths and handling them separately, we consider the entire path Up^q and build for it 
a single functioning path in roughly the same way as we did for each of these two sub-paths. 

As before, let x^'^^ be the highest clean ancestor of (p, 0) along Ilpy , and let x^^^ = 7r(x(''^) be its dirty 
parent. Similarly, let y^'^' be the highest clean ancestor of (g, 0) along Hgg/, and let y*^^) = 7r{y^'^>) be its 
dirty parent. Recall also that we defined x*-^-* as the highest (dirty) ancestor of x^^^ along the sub-path 
Ilpy with the same surrogate set as x'"^'. Now we define x'"^^ differently. More specifically, unlike the 
above argument, we would also like to consider nodes that belong to the other sub-path Ilg^g/ of Iip,q- Let 
^xW,yW = {vi = x^^\v2 = 7r(x(^) ),..., 7;t = {p',j),vt+i = {q',j),... ,Vh = y^^^) be the sub-path of Up^g 
from x'"^^ to y^^' , where 1 < t < h < 2j + 2. Let i be the maximum index in [h], such that S{x^^') = S{vi); 
we define x'^' as Vi. (Unlike before, now it is indeed possible that x'^' would belong to Ilgg/.) 

In the above argument, we defined x^^^ = 7r(x^^'*). This makes sense, as the objective was to get closer 
and closer to {p,j'). Here the objective is to get closer and closer to y^^^ ■ So we will define x^"^' = 7r(x'"^') 
only in the case that x^^^ belongs to Hp^ \ {p',j). If x'^^ = {p',j), then we define x^^^ = {q',j)- Finally, 
in the case that x^^^ belongs to Hg^/, we define x^^^ to be the child of x'-^-' along Hg^/. 
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In the same way we define x^'^' ,x^^' , and so forth. We continue this way until we reach x^> = y^^'. In 
exactly the same way as before we get k + 1 vertex-disjoint paths between S{x^^') and S{x^^>) = S{y^^'^). 
Since |-F| < k, at least one of these paths must function. Observe also that p and q are connected to all 
points of S{x^^') and S{y^^'), respectively. (Recall that our adjustment added an internal clique for each 
dirty leaf. Hence, in the case where x^^' = (p, 0) (respectively, y^^' = ((?, 0)) is a dirty leaf, the point p 
(resp., q) is connected to each of the other k points of S{x^^') (resp., S{y^ "i)).) Consequently, we obtain 
a path m.T-L\F between p and q. Moreover, this functioning path is a (1 + 0(e))-spanner path by Lemma 
2.31 and we can reduce the stretch to 1 + e by scaling 7 up by some constant. 



5 Diameter 

In this section we show how to obtain diameter O(logn), without increasing any of the other parameters. 

The basic idea was used before in |14l HH 115) . and involves shortcutting the light subtrees of the 

net-tree, i.e., those with distance scales less than — , where A = max^^tigx 6{u,v) is the diameter of the 

metric X. This shortcutting is carried out using the 1-spanners of [35] (cf. Theorem 3 therein 



Theorem 5.1 ( [45j ) Let T he an arbitrary n-node tree. One can build in 0(n log n) time, a 1-spanner 
for (the tree metric induced by) T with 0{n) edges, degree at most deg(T) + 0(1) and diameter O(logn). 

Next, we would like to add shortcut edges to the spanner % of Section 4. The naive approach would 
be to build the shortcut spanner of Theorem 15.11 for each of the light subtrees of the net-tree T, and 
then replace each shortcut edge by a bipartite matching if possible (i.e., if both endpoints of that edge 
are dirty), and by a bipartite clique otherwise. This would give rise to a fc-FT (1 + e)-spanner with 
logarithmic diameter. However, the degree and lightness would grow by too much, and would exceed the 
desired thresholds of e^^ ' ■ k and e~ '^(A;^ + klogn), respectively. 

In order to control the degree and lightness due to shortcut edges, we first prune some nodes from 
T, and only later proceed to shortcutting the light subtrees of the resulting pruned tree T* . Then we 
proceed as before, replacing each shortcut edge by a bipartite matching (if possible) or a bipartite clique. 

Our ultimate spanner 7i* is obtained by adding the shortcut edges to the spanner T-L of Section 4. 

We turn to describing how the pruned tree T* is obtained. 

• First, we remove all clean nodes from the net-tree. Indeed, shortcutting clean nodes is redundant, 
as the first dirty node on any (1 + e)-spanner path is connected to its clean child on that path via 
a bipartite clique (i.e., there is a bipartite clique between the corresponding surrogate sets). Since 
the surrogate set of any clean node contains its entire descendant set (see Observation 13. 5p , one 
can go from any leaf point to all the surrogates of the relevant dirty node via a direct edge. In the 
degenerate case where the leaf itself is dirty, we have an internal clique over the surrogate set of 
that leaf (recall that the spanner Ti of Section 4 contains an internal clique over the surrogate set 
of each dirty leaf) , and so one can still go from any leaf point to all the surrogates of that dirty leaf 
via a direct edge. 

• Second, we go over the resulting tree (which contains only dirty nodes) top-down, looking for nodes 
x whose surrogate set is the same as that of its parent 'ir{x) and as that of every one of its dirty 
siblings. Such nodes are called redundant, and they are removed from the tree. When a node x and 
its siblings are removed from the tree, we connect tt{x) with its grandchildren. These grandchildren 
become the new children of it{x), and they will be siblings in T* (hereafter, T* -siblings). However, 
they too may be redundant (if their surrogate set is the same as vr(x)), and thus removed from 
the tree. This process may be repeated over and over, hence the children of tt{x) in the resulting 
pruned tree T* may be of significantly smaller level than that of 7r(x). That is, the parent x' of an 
i-level node x in the pruned tree T* may be of level i' , where i <^ i' . Notice that S{x') 7^ S{x). 
Moreover, for every j-level node z on the path between x and x' in the original tree T, where 
j £ [i + l,i' — 1], we have S{z) = S{x'). (Indeed, otherwise the node z would not be redundant; 
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since x is dirty, z will be dirty too by Observation 13.41 and so it would have to belong to T*, 
which is a contradiction.) In other words, the edge (x,x') in the pruned tree T* corresponds to 
a path (x = Vj, f j+i, f j+2, . . . , x' = Uj') in the original tree T, where all vertices Uj+i, . . . , Uj'-i are 
redundant and 5(vi+i) = S{viJ^2) = ■ ■ ■ = S{x') ^ S{x). In particular, this means that for any pair 
x,y oi (dirty non-redundant) nodes in T*, x is an ancestor of y in T* if and only if x is an ancestor 
of y in the original net-tree T. 

Note also that the degree of the resulting pruned tree T* may be larger than the degree of the 
original tree T. However, by Fact 12. 1| there can be only 0{\)^^'^> nodes with the same surrogate set 
at each level. This means that the degree of T* will exceed the degree of T by at most a factor of 
0{1)^^'^' . Since the degree of the original tree T is 0(1)*^^'^^ it follows that the degree of the pruned 
tree T* is at most O(l)'^'^'^) • 0(1)'^('^) = 0{1)'^^'^\ i.e., the degree does not grow by too much. 

For a node x in T, denote by 7r(x) (respectively, 7r*(a;)) its parent in the original tree T (resp., pruned 
tree T*). If x does not belong to T*, then ■n*{x) denotes the first ancestor of x in T which belongs to T* . 

The pruned tree T* has some important advantages over the original net-tree T. 

First, all nodes of T* are dirty, and so any shortcut edge for T* will translate into a bipartite matching 
rather than a bipartite clique. This property, however, is not required for achieving the desired bounds. 
That is, even if we are being wasteful and translate the shortcut edges into bipartite cliques, the desired 
bounds on the degree and lightness will still be in check; we shall address this issue in the sequel. 

We use the fact that there are no clean and redundant nodes in T* to prove the following lemma, 
which is critical for achieving the desired bounds on both the degree and the lightness. 

Lemma 5.2 Every point p ^ X may serve as a surrogate of at most e^*^(^) nodes of T* . 

Proof: Consider an arbitrary point p £ X, and let i be the first level in which p is a surrogate of some 
(dirty non-redundant) z-level node x in T*. If x is the root of T*, then we are done. We henceforth assume 
that X is not the root of T*. Since x is non-redundant, its surrogate set must be different than either the 
surrogate set 5(7r*(x)) of its parent 7r*(x) in T* or the surrogate set S{y) of some dirty T*-sibling y of x. 
Define x' as x if it is a non-leech, or as the host of x otherwise. Note that x' is dirty and S{x') = S{x). 
It is possible that x' is redundant, and thus does not belong to the pruned tree T*. 

We argue that term{x') must be over until level i + t + 2>. Note that the parent 7r(x') of x' in T may 
be different than the parent 7r*(x') of x' in T*; in this case 7r(x') is a descendant of 7r*(x') in T. However, 
in either case S'(7r*(x')) = S{it{x')) holds by the construction. Similarly, we have 5(7r*(x)) = S'(7r(x)). 

In the case that S{x') ^ S{n*{x')), we have S{x') ^ S{'k{x')), which means that term{x') is over at 
level i. We henceforth assume that S{x') = S{tt*{x')), and so S{x) = S{x') = S{'ir{x')). 
Suppose first that S{x) 7^ 5(7r(x)), which means that 5(7r(x)) / 5(7r(x')), and so 7r(x) 7^ 7r(x'), x ^ x'. In 
this case x is a leech of x' . By Observation 13.21 7r(x) and 7r(x') are 24-friends, and so they are connected 
by a cross edge. Since x is dirty, 7r(x) is also dirty by Observation 13.41 and we have |5(7r(x))| = k + 1. The 
fact that 5(7r(x)) 7^ 5'(7r(x')) implies that the degree of the surrogates of S{-k(x')) due to non-redundant 
cross edges since their appointment reaches k + 1 at level i -|- 1 or before. It follows that the second phase 
oiterm{x') will start at level i-|-2 or before. The second phase lasts precisely t + 2 levels, and so term{x') 
will be over until level i + r + 3. 

Next, assume that S{x) = S{'k{x)). By construction, 5'(7r(x)) = S'(7r*(x)), and so ^(x) = 5(7r*(x)). In 
this case it must hold that ^(x) / S{y), for some dirty r*-sibling y of x. Since x and y are r*-siblings, 
S'(7r(x)) = S{TT{y)). (It is possible that 7r(x) = 7r(y).) Observation 13.91 implies that 7r(x) and 7r(y) are 
68-friends, and so x and y are 370- friends. Since x is a leech of x', it follows that x' and y are 394- friends, 
and so there is a cross edge between x' and y (assuming 7 > 394). Since y is dirty, we have |5'(y)| = k + 1. 
Note also that ^(x') = ^(x) 7^ S{y). Hence the degree of the surrogates of S{x') due to non-redundant 
cross edges since their appointment reaches A; -|- 1 at level i or before. Consequently, the second phase of 
term{x') will start at level i -|- 1 or before, and so term{x') will be over until level i + t + 2. 

We have shown that term{x') must be over until level i + t + 3. Moreover, by Claim 13.111 and the 
construction, p cannot be a surrogate of any j-level node, for all j £ [i + t + 4:,i]. In other words, p may 
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only serve as a surrogate of j-level nodes, where j € [i,z + r + 3]. Since p may serve as a surrogate of 
at most 0{1)^^'^^ nodes at each level of the original tree T, it will also serve as a surrogate of at most 
0(1) '^ nodes at each level of the pruned tree T*. We conclude that p may serve as a surrogate of at 
most (r + 4) • 0(1)*^^'^^ < e~'-^^'^> nodes of the pruned tree T*, as required. | 

Denote by T{* , . . . , T^ the light subtrees of the pruned tree T* . Notice that the node sets of all the 
light subtrees are pairwise disjoint. Consider now an arbitrary light subtree T* of T*. Its degree deg(T^*) 
is at most deg(T*) = 0(1)*^'-'^'. We use the 1-spanners of Theorem 15. II to shortcut T^, and then translate 
each non-redundant shortcut edge (x, y) into a perfect bipartite matching between the corresponding 
surrogate sets S{x) and S{y). Notice that such a matching between S{x) and S{y) increases the degree 
of each point in S{x) U S{y) by only one unit. Any redundant shortcut edge {x,y) (with S{x) = S{y)) is 
simply disregarded. By Theorem 15. H the shortcut edges increase the degree of each tree node of T^ by at 
most deg(rj*) + 0(1) = 0(1)^ ' units. Also, Lemma [5.21 shows that every point may serve as a surrogate 
of at most e~^'^' nodes of T*. It follows that the degree of any point (due to the bipartite matchings that 
correspond to the non-redundant shortcut edges) is at most e~^^'^\ and so the degree of the spanner T-L* 
will be in check. In fact, even if we are being wasteful and translate the non-redundant shortcut edges 
into bipartite cliques, the degree of Ti* will still be bounded above by the desired threshold of e~^^'^' ■ k. 

By Lemma 15.21 the number of nodes in the pruned tree T* is bounded above by e~ '^ • n. As 
mentioned, the node sets of all the light subtrees of T* are pairwise disjoint. Hence, by Theorem 15. 11 the 
total number of all shortcut edges is bounded above by 0{e~^^'^^ ■ n) = e~^^'^> ■ n. Since the distance scale 
of each light subtree is at most — (and as the distance scales decrease geometrically with the level) , the 
weight of any shortcut edge is at most 0(— ). Moreover, each of the k-\-l edges of the bipartite matching 
that replaces a shortcut edge is also bounded by 0{—). Note also that A < u){MST{X)). It follows that 
the total weight of the bipartite matchings that correspond to all the non-redundant shortcut edges is at 
most e~^^'^' ■ n ■ 0{—){k + 1) < e~ '•^ • k ■ lo{MST{x)), and so the lightness of the spanner T-L* will be in 
check. In fact, even if we are being wasteful and translate the non-redundant shortcut edges into bipartite 
cliques, the lightness of T-L* will still be bounded above by the desired threshold of e~^^'^>{k'^ + klogn). 

Finally, we show that %* is a A:-FT (1 + e)-spanner with diameter O(logn). Consider an arbitrary 
pair p,q G X\F of functioning points (where |F[ < k), and let Ilp^q be the (l + e)-spanner path between p 
and q in the spanner H that is guaranteed by Lemma [2. 2 1 Recall that Ilp^g is obtained as the union of the 
two sub-paths Il{p,p') and Il{q,q') between (p, 0) and {p',j) and between (g, 0) and {q',j), respectively, 
which are glued together via the j-level cross edge between (p', j) and {q',j)- Note that some of the nodes 
along Ilp^g may not belong to T* . Let H* , be the path obtained from Il^y by (i) replacing each node x 
along Ilpy which does not belong to T* with 7r*(x) (i.e., with the first ancestor of x in T that belongs 
to T*), and (ii) removing duplicates, i.e., leaving only the last occurrence of each node in that path. Let 
X* be the last node in H* ,, and observe that H* , is almost a sub-path of Ilpy. More specifically, if 
{p' ,j) belongs to T* , then H* / is a sub-path of Ilpy, with x* = {p' ,j). Otherwise the last node x* along 
n* , is Tr*{p',j), and the path H* , \ vr*(p', j) is a sub-path of Ilpy. We define H* , in the same way, 
and denote the last node in II* , by y*. Let II* = II* , o [x*,y*) o II* , be the union of the two paths 
n* , and n* ,, which are glued together via the edge {x*,y*). Observe that x* and y* may be different 
than {p',j) and {q',j), respectively; in particular, the edge {x*,y*) may not belong to the spanner H. 
Nevertheless, we must have S{x*) = S{p',j) and S{y*) = S{q',j) by the construction. Consequently, 
the possible differences between x* and {p',j) and between y* and {q',j) are insignificant, as x* and 
y* can play the role of {p',j) and {q',j), respectively. That is, the bipartite clique or matching that 
should replace the possibly non-existing edge (x*,y*) is incarnated in the bipartite clique or matching 
that replaces the j-level cross edge between {p',j) and {q',j)- 

Observe that the path II* may contain many edges. This is where the shortcut edges come in handy. 
That is, we can use the shortcut edges to reduce the number of edges in the path 11*^ to 0(log n), without 
increasing the weight of the path. The proof for this assertion is simple, and follows similar lines as those 
in the works of |141 l44lll5j. (The main idea behind this proof is that there are only 0(log n) levels with 
distance scales at least — . In other words, by removing the light subtrees Tj*, . . . ,T^ from the pruned 

29 



tree T*, we obtain a tree T with only O(logn) levels. To maneuver over the (possibly many) remaining 
levels of T we use the shortcut edges.) We will henceforth assume that H* ,j contains only O(logn) edges. 
In Section 4 we used a sub-path n^.{i) „{i) of lip ^ to show that there are k + 1 vertex-disjoint paths 
between S{x^^') and S{y^^'), where x^^' (respectively, y^^') stands for the first dirty node along n(p,p') 
(resp., Ii{q,q')). By using the path 11*^^ instead of n^(i) (i), we can show in exactly the same way that 
there are k + 1 vertex-disjoint paths between the surrogate sets S{xi) and S{yi) of the first and last nodes 
xi and yi along H* g, respectively. Moreover, since 11* ^ contains only O(logn) edges, all these paths have 
at most O(logn) edges. The fact that \F\ < k implies that at least one of these paths must function. 
Finally, observe that p and q are connected to all points of S{xi) and S{yi), respectively. It follows that 
there is a (1 -|- e)-spanner path in 7i* \ F between p and q that consists of only O(logn) edges. 

6 Running Time 

Our construction uses the net-tree spanner of [40^ [30] and the 1-spanners of [l5] as black-boxes. The con- 
struction of [40t I30j (respectively, [55]) can be implemented within time e~ '^ -nlogn (resp., 0(n log n)). 

A central ingredient in the net-tree spanner of [401 [30] is the underlying net-tree, which is based on a 
sophisticated hierarchical partition from [TT] . To build the net-tree and the underlying spanner efficiently, 
it is important to be able to concentrate on only e~'^^'^' ■ n useful tree nodes. In particular, a node is 
called lonely if it has exactly one child in T (which corresponds to the same net-point as the parent); 
otherwise it is non-lonely. Following |40[ I30[ [T5] and other works in this context, a long chain of lonely 
nodes will be represented implicitly for efficiency reasons; implementation details can be found in [30]. 

Our algorithm from Section 3.1 (see in particular Section 3.1.4) traverses the net-tree bottom-up. The 
sets S{-),D{-), F{-), R{-) are computed for the i-level (useful) nodes, only after we have computed these 
sets for the nodes at lower levels j G [0, i — 1]. The computation of these sets is carried out via Procedure 
Computes etsu\, which makes heavy use of the i-level cross edges that we are given from the net-tree 
spanner of [401130] . Notice that each tree node x is incident on only e~ '^ cross edges and only 0(1) '^ 
tree edges. To compute the sets S{x), D{x), F{x),R{x) for an i-level node x, we need to gather information 
from x's neighbors y either due to cross edges or due to tree edges (more specifically, children), where 
most of the information about such neighbors y is held in the corresponding sets S{y),D{y),F(y),R(y) 
of y. With this information at hand, it is rather simple to compute the sets S{x),D{x),F{x),R{x). In 
particular, since a potential host for a node is a 24-friend of that node, there is a cross edge between a 
node and all its potential hosts; hence finding a potential host can be carried out efficiently. 

The descendant sets D{-) of all tree nodes can be computed in a straightforward way within e~ ' •* • n 
time. It is more difficult to compute the other sets S{-),F(-),R(-) efficiently. In particular, note that 
Procedure ComputeSetS(^i) upper bounds the sizes of the surrogate sets S{-) and the friend sets F{-) by 
2k + 1 and 3k + 3, respectively. Upper bounding the size of S{-) and F{-) by e"*^^'^^ • k is critical in order 
to perform efficiently. Similarly, we also need to bound the size of the reserve sets R{-) by e"'^^''' • k. 
Consider an arbitrary node x. We argue that it suffices to keep track of the clean points that were added 
to the reserve sets of either x or its descendants in the last r levels. Indeed, a point p that belongs to the 
reserve set R{y) of some i-level node y will be a 10- friend of the (i -|- T)-level ancestor y' of y by Claim [3^ 
Assuming p belongs to F{y'), there is no reason to store it in R{y') as well. If some node y on the path 
in T between y and y' satisfies |-F(y)| = 3A: + 3, then p may not belong to F[y'). (This is the only case 
in which p may not belong to F{y').) However, in this case we should have enough points in F{y'). To 
be on the safe side, besides the points that were added to the reserve sets of either x or its descendants 
in the last r levels, we may store in R{x) additional 0{k) points that were added to the reserve sets of 
x's descendants before the last r levels; as mentioned, such points are 10-friends of x. In this way we 
always keep track of enough clean 10-friends of a node. By construction, in each level at most e~^ ' ■ k 
new points are added to the reserve set of any node. Since we only keep track of the last r levels (and 
at most 0{k) additional points), it follows that the size of the reserve sets R{-) can be upper bounded 
by r • e-'^('^) • k + 0{k) < e''^^ • k. Given that the size of ah sets S {■) , F {■) , R{-) is bounded above by 

30 



g-0{d) . ^^ ^^ jg gg^gy ^^ g^^ |. j^ g^^ ^-j^^ QveraH tiHie nBeded to compute the sets S{x),F{x), R{x) for all useful 
nodes x in the tree will be (e"'-^^'^) • A;) • (e^'-^''^-' • n) < e"'^*^'^' • kn. Having computed the surrogate sets 
of all nodes, we replace each edge of the net-tree spanner H of [401 l30j by a bipartite clique between the 
corresponding surrogate sets. The time needed to replace all edges of the spanner H by bipartite cliques 
is asymptotically the same as the number of edges in the resulting FT spanner Ti, which is e~ ' •* • kn. 
It follows that the overall time required to build the spanner Ti from Section 3 is e^^^'^> ■ (nlogn + kn). 

The transformation described in Section 4, which translates each bipartite clique into a bipartite 
matching whenever possible (i.e., when both endpoints of the corresponding edge in the spanner H are 
dirty), can be easily implemented within time e~^^'^' ■ kn. Building the internal cliques for all dirty 
leaves requires another amount of e~ *■ ' • kn time. Consequently, the spanner T-i from Section 4 can be 
implemented within time e"*-^^*^^ • (nlogn + kn). 

Finally, the construction of the pruned tree T* in Section 5 can be carried out within time e~^ ' ■ n. 
By Theorem lS.H shortcutting the light subtrees of T* requires e"'-^^'^^ -nlogn time. We conclude that the 
overall running time required to build the ultimate spanner Ti* from Section 5 (which proves Theorem 
1.1) is at most e''^^'^' • (nlogn + kn). 

To summarize: The spanner H* of Section 5 proves Theorem 1.1. 
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